PT-2012-1742 · Apple · Safari

Published 2012-03-08 · Updated 2018-01-06 · CVE-2011-3844

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari version 5.0.5

Description The issue is related to the improper implementation of the setInterval function, which allows remote attackers to spoof the address bar via a crafted web page.

Recommendations For Apple Safari version 5.0.5, consider disabling the use of the setInterval function until a patch is available. Restrict access to potentially malicious web pages to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-3844

Affected Products

Safari

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-3844 · Security Note
• http://secunia.com/advisories/44976 · Vendor Advisory
• http://osvdb.org/79848 · Note
• http://securityfocus.com/bid/52323 · Note
• http://securitytracker.com/id?1026775 · Note