CVE-2011-3230

Loading...

General

Score:6.8/10.0
Severity:Medium
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:Partial
Integrity:Partial
Availability:Partial

Exploitability Metrics

Access Vector:Network
Access Complexity:Medium
Authentication:None

Published on 10/14/11 - Updated on 08/29/17

Description

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2011-3230
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2011-AVI-566

Exploits

Exploit-DBEDB-17986
SecurityFocusBID-50162

Relative technologies

VendorProduct
applesafari

Share this vulnerability with:

Twitter Facebook LinkedIn Mail