PT-2011-5223 · Apple+2 · Webkit+3
Nicolas Gregoire
·
Publicado
1970-01-01
·
Atualizado
2012-02-14
·
CVE-2011-1774
CVSS v2.0
8.8
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 5.0.6
SUSE Linux Enterprise (affected versions not specified)
Description
The issue is related to improper libxslt security settings in WebKit, allowing remote attackers to create arbitrary files and execute arbitrary code via a crafted web site. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be done remotely.
Recommendations
For Apple Safari versions prior to 5.0.6, update to version 5.0.6 or later to resolve the issue.
For SUSE Linux Enterprise, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Suse Linux Enterprise
Safari
Webkit
Libxslt