A vulnerability has been reported in Apple Safari, which can be exploited by malicious people to steal a user's cookies.

The vulnerability is caused due to an error when handling URLs. This can be exploited to disclose a user's cookie information for an arbitrary website by including a NULL character ("%00") in the URL.

The vulnerability has been reported in versions 1.0 (v85) through 1.1 (v100.1).

Solution
Apply Security Update 2003-12-05.
Further details available to Secunia VIM customers

Provided and/or discovered by
Austin Gilbert

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers