CVE-2010-0045

Published: Mar 15, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document.

Affected (6)

Products: Apple: Safari

Apple

1 product

Safari

Configuration A

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Apple Safari	Up to 4.0.4
Apple Safari	Version 4.0.1
Apple Safari	Version 4.0.2
Apple Safari	Version 4.0.3
Apple Safari	Version 4.0
Apple Safari	Version 4.0 beta

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.