CVE-2012-3596 — Improper Validation of Certificate with Host Mismatch in Apple Safari

CWE-297 — Improper Validation of Certificate with Host Mismatch5 documents5 sources
Severity
9.3CRITICALNVD
GHSA5.8
EPSS
2.2%
top 15.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedJul 25
Latest updateMay 17

Description

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/safari5.1.7+76

🔴Vulnerability Details

2
GHSA
GHSA-h3h6-767f-wq5p: WebKit, as used in Apple Safari before 6↗2022-05-17
▶
GHSA
Improper Validation of Certificates in apache axis↗2018-10-16
▶

📋Vendor Advisories

1
Red Hat
axis: SSL hostname verification bypass, incomplete CVE-2012-5784 fix↗2014-08-19
▶

💬Community

1
Bugzilla
CVE-2014-3596 axis: SSL hostname verification bypass, incomplete CVE-2012-5784 fix↗2014-08-14
▶