CVE-2012-3748

2012-11-0317:55:00

CWE-362

[email protected]

web.nvd.nist.gov

123

cve-2012-3748

race condition

webkit

apple ios

safari

remote attackers

arbitrary code

denial of service

javascript arrays

nvd

7.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.135 Low

EPSS

Percentile

95.6%

JSON

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays.

CPENameOperatorVersion
apple:safariapple safarieq4.0.2
apple:safariapple safarieq3.0.4b
apple:safariapple safarieq1.3.0
apple:safariapple safarieq5.1.3
apple:safariapple safarieq4.0.1
apple:safariapple safarieq1.3.2
apple:safariapple safarieq1.1.1
apple:safariapple safarieq6.0
apple:safariapple safarieq3.0.4
apple:safariapple safarieq1.2.2

CPE	Name	Operator	Version
apple:safari	apple safari	eq	4.0.2
apple:safari	apple safari	eq	3.0.4b
apple:safari	apple safari	eq	1.3.0
apple:safari	apple safari	eq	5.1.3
apple:safari	apple safari	eq	4.0.1
apple:safari	apple safari	eq	1.3.2
apple:safari	apple safari	eq	1.1.1
apple:safari	apple safari	eq	6.0
apple:safari	apple safari	eq	3.0.4
apple:safari	apple safari	eq	1.2.2