CVE-2012-3650 — Sensitive Information Exposure in Apple Safari

CWE-200 — Sensitive Information Exposure2 documents2 sources
Severity
4.3MEDIUMNVD
EPSS
0.6%
top 30.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedJul 25
Latest updateMay 17

Description

WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/safari5.1.7+76

🔴Vulnerability Details

1
GHSA
GHSA-xj9q-xpw7-8898: WebKit in Apple Safari before 6↗2022-05-17
▶