CVE-2012-0585

EPSS 0.78%
Veröffentlicht 08.03.2012 22:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle product-security@apple.com
CVE-Watchlists
Login
Unerledigt
Login

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ iPhone OS Version < 5.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.78%	0.713

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html

Vendor Advisory

Mailing List

http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html

Vendor Advisory

Mailing List

http://secunia.com/advisories/48288

Third Party Advisory

http://secunia.com/advisories/48377

Third Party Advisory

http://www.securitytracker.com/id?1026774

Third Party Advisory

VDB Entry

http://osvdb.org/79964

Broken Link

https://exchange.xforce.ibmcloud.com/vulnerabilities/73871

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2012-0585

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0585

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0585

EUVD