CVE-2012-3610
published 2012-07-25CVE-2012-3610: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
PriorityP337critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
3.73%
88.7th percentile
WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
Affected
77 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | <= 5.1.7 | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jr9h-h7xf-phf2: WebKit, as used in Apple Safari before 6
ghsa_unreviewed·2022-05-17
CVE-2012-3610 [HIGH] GHSA-jr9h-h7xf-phf2: WebKit, as used in Apple Safari before 6
WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
Red Hat
flash-plugin: multiple code execution flaws (APSB12-14)
vendor_redhat·2012-06-08·CVSS 7.5
CVE-2012-2034 [HIGH] flash-plugin: multiple code execution flaws (APSB12-14)
flash-plugin: multiple code execution flaws (APSB12-14)
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.
Red Hat
flash-plugin: multiple code execution flaws (APSB12-14)
vendor_redhat·2012-06-08·CVSS 7.5
CVE-2012-2037 [HIGH] flash-plugin: multiple code execution flaws (APSB12-14)
flash-plugin: multiple code execution flaws (APSB12-14)
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2034.
Red Hat
flash-plugin: multiple code execution flaws (APSB12-14)
vendor_redhat·2012-06-08·CVSS 9.3
CVE-2012-2039 [CRITICAL] flash-plugin: multiple code execution flaws (APSB12-14)
flash-plugin: multiple code execution flaws (APSB12-14)
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Red Hat
flash-plugin: multiple code execution flaws (APSB12-14)
vendor_redhat·2012-06-08·CVSS 9.3
CVE-2012-2035 [CRITICAL] flash-plugin: multiple code execution flaws (APSB12-14)
flash-plugin: multiple code execution flaws (APSB12-14)
Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
Red Hat
flash-plugin: multiple code execution flaws (APSB12-14)
vendor_redhat·2012-06-08·CVSS 9.3
CVE-2012-2036 [CRITICAL] flash-plugin: multiple code execution flaws (APSB12-14)
flash-plugin: multiple code execution flaws (APSB12-14)
Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code via unspecified vectors.
Red Hat
flash-plugin: information disclosure flaw (APSB12-14)
vendor_redhat·2012-06-08·CVSS 4.3
CVE-2012-2038 [MEDIUM] flash-plugin: information disclosure flaw (APSB12-14)
flash-plugin: information disclosure flaw (APSB12-14)
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlhttp://support.apple.com/kb/HT5400http://support.apple.com/kb/HT5485http://support.apple.com/kb/HT5503http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlhttp://support.apple.com/kb/HT5400http://support.apple.com/kb/HT5485http://support.apple.com/kb/HT5503
2012-07-25
Published