← All CVEs

CVE-2012-3748

medium · 5.1

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays.

5.1
CVSS
16.7%
EPSS (exploit prob.)
97th
EPSS percentile
2012-11-03
Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

CWE-362

Affected products

VendorProductAffected versions
applesafari<= 6.0.1
applesafari1.0
applesafari1.0
applesafari1.0.0
applesafari1.0.0b1
applesafari1.0.0b2
applesafari1.0.1
applesafari1.0.2
applesafari1.0.3
applesafari1.1.0
applesafari1.1.1
applesafari1.2.0
applesafari1.2.1
applesafari1.2.2
applesafari1.2.3
applesafari1.2.4
applesafari1.2.5
applesafari1.3
applesafari1.3.0
applesafari1.3.1
applesafari1.3.2
applesafari2.0.0
applesafari2.0.1
applesafari2.0.2
applesafari2.0.3
applesafari2.0.4
applesafari3.0.0
applesafari3.0.0b
applesafari3.0.1
applesafari3.0.1
applesafari3.0.1b
applesafari3.0.2
applesafari3.0.2b
applesafari3.0.3
applesafari3.0.3b
applesafari3.0.4
applesafari3.0.4b
applesafari3.1.0
applesafari3.1.0b
applesafari3.1.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-3748