CVE:CVE-2005-0976
CNNVD:CNNVD-200505-620
AppleWebKit (WebCore and WebKit)在用于多个产品如Safari 1.2和OmniGroup OmniWeb 5.1中时，远程攻击者可以通过XMLHttpRequest Javascript组件来读取任意文件，如使用自动安装的磁盘映像和文件:// URLs。
solution:Upgrade apple safari to a higher version than 1.2,and avoid the version 1.2; Upgrade hmdt shiira to a higher version than 0.93,and avoid the version 0.93; Upgrade omnigroup omniweb to a higher version than 5.1,and avoid the version 5.1