PT-2012-1742 · Apple · Safari

Publicado 2012-03-08 · Atualizado 2018-01-06 · CVE-2011-3844

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari version 5.0.5

Description The issue is related to the improper implementation of the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page.

Recommendations For Apple Safari version 5.0.5, consider disabling the use of the setInterval function until a patch is available. Restrict access to potentially malicious web pages to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-3844

Produtos afetados

Safari

Referências · 5

• http://osvdb.org/79848 · Nota
• http://securityfocus.com/bid/52323 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3844 · Nota de Segurança
• http://secunia.com/advisories/44976 · Aviso do Fabricante
• http://securitytracker.com/id?1026775 · Nota