WebKit in Apple Safari before 5.0.6 has improper libxslt security settings which allows remote attackers to create arbitrary files and consequently execute arbitrary code via a crafted web site. NOTE: this may overlap CVE-2011-1425.