cbcvebase.
CVE-2011-3443
published 2012-03-02

CVE-2011-3443: Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service…

PriorityP434high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.00%
78.7th percentile
Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules.

Affected

66 ranges· showing 25
VendorProductVersion rangeFixed in
applesafari<= 5.0.5—
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——
applesafari——

CVSS provenance

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.