Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2011-3230 — Apple Safari vulnerability

CWE-2645 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
64.5%
top 1.54%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apple Safari
Timeline
PublishedOct 14
Latest updateApr 3

Description

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/safari5.1+70

🔴Vulnerability Details

1
GHSA
GHSA-rv8m-qq6g-85f6: Apple Safari before 5↗2022-05-17
▶

💥Exploits & PoCs

2
Exploit-DB
Apple Safari - 'file://' Arbitrary Code Execution (Metasploit)↗2011-10-17
▶
Metasploit
Apple Safari file:// Arbitrary Code Execution↗
▶

🕵️Threat Intelligence

1
abuse.ch
ThreatFox Malware Profile: Unidentified 001↗2026-04-03
▶