CVE

Id
44005  
CVE No.
CVE-2010-1421  
Status
Candidate  
Description
The execCommand JavaScript function in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly restrict remote execution of clipboard commands, which allows remote attackers to modify the clipboard via a crafted HTML document.  
Phase
Assigned (20100415)  
Votes
None (candidate not yet proposed)  
Comments