CVE-2013-0974 — Apple Iphone OS vulnerability

2 documents2 sources
Severity
5.1MEDIUMNVD
EPSS
0.3%
top 51.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Iphone OS
Timeline
PublishedJan 29
Latest updateMay 17

Description

StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.

CVSS vector

AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/iphone_os6.0.2+2

🔴Vulnerability Details

1
GHSA
GHSA-8w2f-ww3v-rhjq: StoreKit in Apple iOS before 6↗2022-05-17
▶
CVE-2013-0974 — Apple Iphone OS vulnerability | cvebase