PT-2011-3075 · Apple+1 · Webkit+3

Published 2011-03-10 · Updated 2022-08-09 · CVE-2011-1344

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.0.5 iOS versions prior to 4.3.2 for iPhone, iPod, and iPad iOS versions prior to 4.2.7 for iPhone 4 (CDMA)

Description The issue allows remote attackers to execute arbitrary code by exploiting a use-after-free vulnerability in WebKit. This can be achieved by adding children to a WBR tag and then removing the tag, related to text nodes. The vulnerability was demonstrated by Chaouki Bekrar during a Pwn2Own competition at CanSecWest 2011.

Recommendations For Apple Safari versions prior to 5.0.5, update to version 5.0.5 or later. For iOS versions prior to 4.3.2 for iPhone, iPod, and iPad, update to version 4.3.2 or later. For iOS versions prior to 4.2.7 for iPhone 4 (CDMA), update to version 4.2.7 or later. As a temporary workaround, consider restricting access to WebKit until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-1344

SUSE-SU-2012_1605-1

ZDI-11-135

Affected Products

Safari

Suse

Webkit

Ios

References · 31

• https://cve.org/CVERecord?id=CVE-2011-1344 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1344 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-1344 · Vendor Advisory
• https://ubuntu.com/security/CVE-2011-1344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1344 · Security Note
• http://lists.apple.com/archives/security-announce/2011//Apr/msg00001.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011//Apr/msg00002.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011//Apr/msg00000.html · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-135 · Security Note
• http://secunia.com/advisories/44151 · Note
• http://dvlabs.tippingpoint.com/blog/2011/02/02/pwn2own-2011 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66061 · Note
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Note
• http://twitter.com/aaronportnoy/statuses/45632544967901187 · Note
• http://computerworld.com/s/article/9214002/Safari_IE_hacked_first_at_Pwn2Own · Note