5

CVE-2012-0585

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version < 5.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.5% 0.826
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html
Vendor Advisory
Mailing List
http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html
Vendor Advisory
Mailing List
http://secunia.com/advisories/48288
Third Party Advisory
http://secunia.com/advisories/48377
Third Party Advisory
http://www.securitytracker.com/id?1026774
Third Party Advisory
VDB Entry
http://osvdb.org/79964
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/73871
Third Party Advisory
VDB Entry