Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-3230

medium · 6.8

Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.

6.8
CVSS
49.3%
EPSS (exploit prob.)
99th
EPSS percentile
2011-10-14
Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-264

Affected products

VendorProductAffected versions
applesafariall versions
applesafari<= 5.1
applesafari1.0
applesafari1.0
applesafari1.0
applesafari1.0.0
applesafari1.0.0b1
applesafari1.0.0b2
applesafari1.0.1
applesafari1.0.2
applesafari1.0.3
applesafari1.0.3
applesafari1.0.3
applesafari1.0b1
applesafari1.1
applesafari1.1.0
applesafari1.1.1
applesafari1.2
applesafari1.2.0
applesafari1.2.1
applesafari1.2.2
applesafari1.2.3
applesafari1.2.4
applesafari1.2.5
applesafari1.3
applesafari1.3.0
applesafari1.3.1
applesafari1.3.2
applesafari1.3.2
applesafari1.3.2
applesafari2
applesafari2.0
applesafari2.0.0
applesafari2.0.1
applesafari2.0.2
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3
applesafari2.0.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-3230