CVE-2012-3691 — Improper Input Validation in Apple Safari

CWE-20 — Improper Input Validation2 documents2 sources
Severity
5.8MEDIUMNVD
EPSS
0.1%
top 66.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedJul 25
Latest updateMay 17

Description

WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

▶NVDapple/safari5.1.7+76

🔴Vulnerability Details

1
GHSA
GHSA-7vr2-mwjm-89wv: WebKit in Apple Safari before 6↗2022-05-17
▶