cbcvebase.
CVE-2011-3218
published 2011-10-14

CVE-2011-3218: The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which…

low2.6CVSS 3.1
AVNACHAuNCNIPAN
The "Save for Web" selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.

Affected

132 ranges· showing 25
VendorProductVersion rangeFixed in
applemac_os_x<= 10.6.8—
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
applemac_os_x——
CVE-2011-3218 — Cross-site Scripting in Apple MAC OS X | cvebase