PT-2011-4324 · Apple · Safari

Jason Broccardo · Publicado 2011-10-14 · Atualizado 2017-08-29 · CVE-2011-3231

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.1.1

Description The issue concerns the SSL implementation in Apple Safari, which accesses uninitialized memory when processing X.509 certificates. This allows remote web servers to execute arbitrary code via a crafted certificate.

Recommendations For Apple Safari versions prior to 5.1.1, update to version 5.1.1 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-3231

Produtos afetados

Safari

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-3231 · Nota de Segurança
• http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html · Aviso do Fabricante
• http://support.apple.com/kb/HT5000 · Aviso do Fabricante
• http://osvdb.org/76390 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70568 · Nota