Intrusion Prevention

Apple.Safari.Window.setTimeout.Variant.Content.Spoofing

Description

This indicates an attack attempt against a content spoofing vulnerability in Apple Safari.
This issue is caused by an error in the vulnerable software when handling Javascript code with a misused setTimeout() function. It may allow a remote attacker to entice users view a fake page via a specially crafted page.

Affected Products

Apple Safari 3.1

Impact

Information Spoofing: Remote attackers can spoof data of vulnerable systems.

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.