Lucene search

AppleCVE-2011-3443

HistoryMar 02, 2012 - 12:55 a.m.

CVE-2011-3443

2012-03-0200:55:02

CWE-399

apple

web.nvd.nist.gov

webkit

apple safari

cve-2011-3443

vulnerability

remote attackers

arbitrary code

denial of service

heap memory corruption

application crash

cascading style sheets

css

@font-face rules

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.8

Confidence

High

EPSS

0.02

Percentile

89.2%

JSON

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) via vectors related to improper list management for Cascading Style Sheets (CSS) @font-face rules.

Affected configurations

Nvd

Node

applesafariRange≤5.0.5

applesafariMatch1.0

applesafariMatch1.0beta

applesafariMatch1.0beta2

applesafariMatch1.0.0

applesafariMatch1.0.0b1

applesafariMatch1.0.0b2

applesafariMatch1.0.1

applesafariMatch1.0.2

applesafariMatch1.0.3

applesafariMatch1.0.385.8

applesafariMatch1.0.385.8.1

applesafariMatch1.0b1-mac

applesafariMatch1.1

applesafariMatch1.1.0

applesafariMatch1.1.1

applesafariMatch1.2

applesafariMatch1.2.0

applesafariMatch1.2.1

applesafariMatch1.2.2

applesafariMatch1.2.3

applesafariMatch1.2.4

applesafariMatch1.2.5

applesafariMatch1.3

applesafariMatch1.3.0

applesafariMatch1.3.1

applesafariMatch1.3.2

applesafariMatch1.3.2312.5

applesafariMatch1.3.2312.6

applesafariMatch2.0

applesafariMatch2.0.0

applesafariMatch2.0.1

applesafariMatch2.0.2

applesafariMatch2.0.3

applesafariMatch2.0.3417.8

applesafariMatch2.0.3417.9

applesafariMatch2.0.3417.9.2

applesafariMatch2.0.3417.9.3

applesafariMatch2.0.4

applesafariMatch2.0.4-mac

applesafariMatch3.0

applesafariMatch3.0.0

applesafariMatch3.0.0-mac

applesafariMatch3.0.0b

applesafariMatch3.0.0b-windows

applesafariMatch3.0.1

applesafariMatch3.0.1-mac

applesafariMatch3.0.1beta

applesafariMatch3.0.1b

applesafariMatch3.0.1b-windows

applesafariMatch3.0.2

applesafariMatch3.0.2-mac

applesafariMatch3.0.2b

applesafariMatch3.0.2b-windows

applesafariMatch3.0.3

applesafariMatch3.0.3-mac

applesafariMatch3.0.3b

applesafariMatch3.0.3b-windows

applesafariMatch3.0.4

applesafariMatch3.0.4-mac

applesafariMatch3.0.4b

applesafariMatch3.0.4b-windows

applesafariMatch3.1.0

applesafariMatch3.1.0-mac

applesafariMatch3.1.0b

applesafariMatch3.1.0b-windows

applesafariMatch3.1.1

applesafariMatch3.1.1b-windows

applesafariMatch3.1.2

applesafariMatch3.1.2b-windows

applesafariMatch3.2.0

applesafariMatch3.2.0b-windows

applesafariMatch3.2.1

applesafariMatch3.2.1b-windows

applesafariMatch3.2.2

applesafariMatch3.2.2b-windows

applesafariMatch4.0

applesafariMatch4.0beta

applesafariMatch4.0.0b

applesafariMatch4.0.1

applesafariMatch4.0.2

applesafariMatch4.0.3

applesafariMatch4.0.4

applesafariMatch4.0.5

applesafariMatch4.1

applesafariMatch4.1.1

applesafariMatch4.1.2

applesafariMatch5.0.1

applesafariMatch5.0.2

applesafariMatch5.0.3

applesafariMatch5.0.4

VendorProductVersionCPE
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
applesafari1.0cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*
applesafari1.0cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*
applesafari1.0cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*
applesafari1.0.0cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*
applesafari1.0.0b1cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*
applesafari1.0.0b2cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*
applesafari1.0.1cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*
applesafari1.0.2cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*
applesafari1.0.3cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	safari	*	cpe:2.3:a:apple:safari::::::::
apple	safari	1.0	cpe:2.3:a:apple:safari:1.0:::::::*
apple	safari	1.0	cpe:2.3:a:apple:safari:1.0:beta::::::
apple	safari	1.0	cpe:2.3:a:apple:safari:1.0:beta2::::::
apple	safari	1.0.0	cpe:2.3:a:apple:safari:1.0.0:::::::*
apple	safari	1.0.0b1	cpe:2.3:a:apple:safari:1.0.0b1:::::::*
apple	safari	1.0.0b2	cpe:2.3:a:apple:safari:1.0.0b2:::::::*
apple	safari	1.0.1	cpe:2.3:a:apple:safari:1.0.1:::::::*
apple	safari	1.0.2	cpe:2.3:a:apple:safari:1.0.2:::::::*
apple	safari	1.0.3	cpe:2.3:a:apple:safari:1.0.3:::::::*