Lucene search

K
cve[email protected]CVE-2011-1774
HistoryJul 21, 2011 - 11:55 p.m.

CVE-2011-1774

2011-07-2123:55:00
CWE-20
web.nvd.nist.gov
34
cve-2011-1774
webkit
apple safari
libxslt
security settings
remote attackers
arbitrary files
arbitrary code

8.8 High

AI Score

Confidence

High

8.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

0.968 High

EPSS

Percentile

99.7%

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.

8.8 High

AI Score

Confidence

High

8.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

0.968 High

EPSS

Percentile

99.7%