CVE-2011-3230

EPSS 50.2%

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/17986unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html http://osvdb.org/76389 https://exchange.xforce.ibmcloud.com/vulnerabilities/70567 http://support.apple.com/kb/HT5000 http://www.securityfocus.com/bid/50162