CVE-2013-0974

published 2013-01-29

CVE-2013-0974: StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows…

Priority P4 23 medium 5.1 CVSS 2.0

AV N AC H Au N C P I P A P

StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apple	iphone_os	<= 6.0.2	—
apple	iphone_os	—	—
apple	iphone_os	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.