Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-1774

high · 8.8

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.

8.8
CVSS
43.2%
EPSS (exploit prob.)
99th
EPSS percentile
2011-07-21
Published

AV:N/AC:M/Au:N/C:N/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
applesafari<= 5.0.5
applesafari1.0
applesafari1.0
applesafari1.0
applesafari1.0.0
applesafari1.0.0b1
applesafari1.0.0b2
applesafari1.0.1
applesafari1.0.2
applesafari1.0.3
applesafari1.0.3
applesafari1.0.3
applesafari1.1
applesafari1.1.0
applesafari1.1.1
applesafari1.2
applesafari1.2.0
applesafari1.2.1
applesafari1.2.2
applesafari1.2.3
applesafari1.2.4
applesafari1.2.5
applesafari1.3
applesafari1.3.0
applesafari1.3.1
applesafari1.3.2
applesafari1.3.2
applesafari1.3.2
applesafari2
applesafari2.0
applesafari2.0.0
applesafari2.0.1
applesafari2.0.2
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.4
applesafari3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1774