Lucene search

[email protected]CVE-2011-3246

HistoryOct 14, 2011 - 10:55 a.m.

CVE-2011-3246

2011-10-1410:55:00

CWE-200

[email protected]

web.nvd.nist.gov

cfnetwork

apple

ios

mac os x

vulnerability

cve-2011-3246

url parsing

5.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.8%

JSON

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.

CPENameOperatorVersion
apple:mac_os_x_serverapple mac os x servereq10.7.1
apple:mac_os_x_serverapple mac os x servereq10.7.0
apple:mac_os_xapple mac os xeq10.7.0
apple:mac_os_xapple mac os xeq10.7.1
apple:iphone_osapple iphone oseq4.0
apple:iphone_osapple iphone oseq4.3.2
apple:iphone_osapple iphone oseq4.0.2
apple:iphone_osapple iphone oseq4.0.1
apple:iphone_osapple iphone oseq3.2
apple:iphone_osapple iphone oseq4.2.8

CPE	Name	Operator	Version
apple:mac_os_x_server	apple mac os x server	eq	10.7.1
apple:mac_os_x_server	apple mac os x server	eq	10.7.0
apple:mac_os_x	apple mac os x	eq	10.7.0
apple:mac_os_x	apple mac os x	eq	10.7.1
apple:iphone_os	apple iphone os	eq	4.0
apple:iphone_os	apple iphone os	eq	4.3.2
apple:iphone_os	apple iphone os	eq	4.0.2
apple:iphone_os	apple iphone os	eq	4.0.1
apple:iphone_os	apple iphone os	eq	3.2
apple:iphone_os	apple iphone os	eq	4.2.8

Rows per page:

1-10 of 231

References

lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html

lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html

lists.apple.com/archives/security-announce/2012/Feb/msg00000.html

support.apple.com/kb/HT4999

support.apple.com/kb/HT5002

support.apple.com/kb/HT5052

support.apple.com/kb/HT5130

www.securityfocus.com/bid/50085

www.securityfocus.com/bid/50115

exchange.xforce.ibmcloud.com/vulnerabilities/70551

5.9 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.8%

JSON

Related for CVE-2011-3246

seebug1 prion1 securityvulns8 nessus5 openvas4