CVE-2012-0676 — Improper Input Validation in Apple Safari

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.7%
top 28.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedMay 11
Latest updateMay 17

Description

WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/safari5.1.6+75

🔴Vulnerability Details

1
GHSA
GHSA-rq8p-47fw-3qqv: WebKit in Apple Safari before 5↗2022-05-17
▶

📋Vendor Advisories

1
Red Hat
kernel: kvm: irqchip_in_kernel() and vcpu->arch.apic inconsistency↗2012-02-07
▶