CVE-2012-0674 — Improper Input Validation in Apple Iphone OS

CWE-20 — Improper Input Validation4 documents2 sources
Severity
5.0MEDIUMNVD
NVD4.3
EPSS
0.4%
top 41.91%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Iphone OSGoogle Chrome
Timeline
PublishedMay 8
Latest updateMay 17

Description

Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/iphone_os5.1+21
▶NVDgoogle/chrome21.0.1180.81+44

🔴Vulnerability Details

2
GHSA
GHSA-crpp-54x9-gpw9: Safari in Apple iOS before 5↗2022-05-17
▶
GHSA
GHSA-rg3p-8qcv-gq96: Google Chrome before 21↗2022-05-17
▶
CVE-2012-0674 — Improper Input Validation in Apple | cvebase