CVE-2012-3714
published 2012-09-20CVE-2012-3714: The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows…
PriorityP418medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
0.92%
56.9th percentile
The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site.
Affected
78 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | <= 6.0 | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.htmlhttp://osvdb.org/85653http://support.apple.com/kb/HT5502http://www.securityfocus.com/bid/55625https://exchange.xforce.ibmcloud.com/vulnerabilities/78681http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.htmlhttp://osvdb.org/85653http://support.apple.com/kb/HT5502http://www.securityfocus.com/bid/55625https://exchange.xforce.ibmcloud.com/vulnerabilities/78681
2012-09-20
Published