WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1 iPhone 1.0 through 1.1.2 and iPod touch 1.1 through 1.1.2 allows remote attackers to \navigate the subframes of any other page \ which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.