The host is installed with Apple Safari before 4.0 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle a CANVAS element with an SVG image. Successful exploitation could allow attackers to read images from arbitrary web sites.