CVE-2011-1774

EPSS 76.75%
Published 21.07.2011 23:55:02
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site.  NOTE: this may overlap CVE-2011-1425.

Affected products Warnungen 0 Metrics 2 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 5.0.5

   Apple ≫ macOS X Version10.5.8
   Apple ≫ macOS X Version10.6.8
   Apple ≫ macOS X Version10.6.9
   Apple ≫ macOS X Version10.7.0
   Apple ≫ macOS X Server Version10.5.8
   Apple ≫ macOS X Server Version10.6.8
   Apple ≫ macOS X Server Version10.6.9
   Apple ≫ macOS X Server Version10.7.0
   Microsoft ≫ Windows 7
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp3

Apple ≫ Safari Version1.0

Apple ≫ Safari Version1.0 Updatebeta

Apple ≫ Safari Version1.0 Updatebeta2

Apple ≫ Safari Version1.0.0

Apple ≫ Safari Version1.0.0b1

Apple ≫ Safari Version1.0.0b2

Apple ≫ Safari Version1.0.1

Apple ≫ Safari Version1.0.2

Apple ≫ Safari Version1.0.3

Apple ≫ Safari Version1.0.3 Update85.8

Apple ≫ Safari Version1.0.3 Update85.8.1

Apple ≫ Safari Version1.1

Apple ≫ Safari Version1.1.0

Apple ≫ Safari Version1.1.1

Apple ≫ Safari Version1.2

Apple ≫ Safari Version1.2.0

Apple ≫ Safari Version1.2.1

Apple ≫ Safari Version1.2.2

Apple ≫ Safari Version1.2.3

Apple ≫ Safari Version1.2.4

Apple ≫ Safari Version1.2.5

Apple ≫ Safari Version1.3

Apple ≫ Safari Version1.3.0

Apple ≫ Safari Version1.3.1

Apple ≫ Safari Version1.3.2

Apple ≫ Safari Version1.3.2 Update312.5

Apple ≫ Safari Version1.3.2 Update312.6

Apple ≫ Safari Version2

Apple ≫ Safari Version2.0

Apple ≫ Safari Version2.0.0

Apple ≫ Safari Version2.0.1

Apple ≫ Safari Version2.0.2

Apple ≫ Safari Version2.0.3

Apple ≫ Safari Version2.0.3 Update417.8

Apple ≫ Safari Version2.0.3 Update417.9

Apple ≫ Safari Version2.0.3 Update417.9.2

Apple ≫ Safari Version2.0.3 Update417.9.3

Apple ≫ Safari Version2.0.4

Apple ≫ Safari Version3

Apple ≫ Safari Version3.0

Apple ≫ Safari Version3.0.0

Apple ≫ Safari Version3.0.0b

Apple ≫ Safari Version3.0.1

Apple ≫ Safari Version3.0.1b

Apple ≫ Safari Version3.0.2

Apple ≫ Safari Version3.0.2b

Apple ≫ Safari Version3.0.3

Apple ≫ Safari Version3.0.3b

Apple ≫ Safari Version3.0.4

Apple ≫ Safari Version3.0.4b

Apple ≫ Safari Version3.1.0

Apple ≫ Safari Version3.1.0b

Apple ≫ Safari Version3.1.1

Apple ≫ Safari Version3.1.2

Apple ≫ Safari Version3.2.0

Apple ≫ Safari Version3.2.1

Apple ≫ Safari Version3.2.2

Apple ≫ Safari Version4.1

Apple ≫ Safari Version4.1.1

Apple ≫ Safari Version4.1.2

Apple ≫ Safari Version5.0

Apple ≫ Safari Version5.0.1

Apple ≫ Safari Version5.0.2

Apple ≫ Safari Version5.0.3

Apple ≫ Safari Version5.0.4

Apple ≫ WebKit

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	76.75%	0.989

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	8.6	9.2	AV:N/AC:M/Au:N/C:N/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html

http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html

Patch

Vendor Advisory

http://support.apple.com/kb/HT4808

Vendor Advisory

http://support.apple.com/kb/HT4981

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

http://support.apple.com/kb/HT4999

http://securityreason.com/securityalert/8481

https://nvd.nist.gov/vuln/detail/CVE-2011-1774

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1774

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1774

EUVD