← back
CVE-2012-0585

CVE-2012-0585

EPSS 2.5%
The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2012/Mar/msg00003.htmlhttp://osvdb.org/79964http://secunia.com/advisories/48288http://secunia.com/advisories/48377https://exchange.xforce.ibmcloud.com/vulnerabilities/73871http://www.securitytracker.com/id?1026774