Lucene search
HistoryOct 14, 2011 - 10:55 a.m.
CVE-2011-3218
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
4.9
Confidence
High
EPSS
0.002
Percentile
51.4%
The “Save for Web” selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.
Affected configurations
Node
applemac_os_xRange≤10.6.8
ORapplemac_os_xMatch10.0
ORapplemac_os_xMatch10.0.0
ORapplemac_os_xMatch10.0.1
ORapplemac_os_xMatch10.0.2
ORapplemac_os_xMatch10.0.3
ORapplemac_os_xMatch10.0.4
ORapplemac_os_xMatch10.1
ORapplemac_os_xMatch10.1.0
ORapplemac_os_xMatch10.1.1
ORapplemac_os_xMatch10.1.2
ORapplemac_os_xMatch10.1.3
ORapplemac_os_xMatch10.1.4
ORapplemac_os_xMatch10.1.5
ORapplemac_os_xMatch10.2
ORapplemac_os_xMatch10.2.0
ORapplemac_os_xMatch10.2.1
ORapplemac_os_xMatch10.2.2
ORapplemac_os_xMatch10.2.3
ORapplemac_os_xMatch10.2.4
ORapplemac_os_xMatch10.2.5
ORapplemac_os_xMatch10.2.6
ORapplemac_os_xMatch10.2.7
ORapplemac_os_xMatch10.2.8
ORapplemac_os_xMatch10.3
ORapplemac_os_xMatch10.3.0
ORapplemac_os_xMatch10.3.1
ORapplemac_os_xMatch10.3.2
ORapplemac_os_xMatch10.3.3
ORapplemac_os_xMatch10.3.4
ORapplemac_os_xMatch10.3.5
ORapplemac_os_xMatch10.3.6
ORapplemac_os_xMatch10.3.7
ORapplemac_os_xMatch10.3.8
ORapplemac_os_xMatch10.3.9
ORapplemac_os_xMatch10.4
ORapplemac_os_xMatch10.4.0
ORapplemac_os_xMatch10.4.1
ORapplemac_os_xMatch10.4.2
ORapplemac_os_xMatch10.4.3
ORapplemac_os_xMatch10.4.4
ORapplemac_os_xMatch10.4.5
ORapplemac_os_xMatch10.4.6
ORapplemac_os_xMatch10.4.7
ORapplemac_os_xMatch10.4.8
ORapplemac_os_xMatch10.4.9
ORapplemac_os_xMatch10.4.10
ORapplemac_os_xMatch10.4.11
ORapplemac_os_xMatch10.5
ORapplemac_os_xMatch10.5.0
ORapplemac_os_xMatch10.5.1
ORapplemac_os_xMatch10.5.2
ORapplemac_os_xMatch10.5.3
ORapplemac_os_xMatch10.5.4
ORapplemac_os_xMatch10.5.5
ORapplemac_os_xMatch10.5.6
ORapplemac_os_xMatch10.5.7
ORapplemac_os_xMatch10.5.8
ORapplemac_os_xMatch10.6.0
ORapplemac_os_xMatch10.6.1
ORapplemac_os_xMatch10.6.2
ORapplemac_os_xMatch10.6.3
ORapplemac_os_xMatch10.6.4
ORapplemac_os_xMatch10.6.5
ORapplemac_os_xMatch10.6.6
ORapplemac_os_xMatch10.6.7
ORapplemac_os_x_serverRange≤10.6.8
ORapplemac_os_x_serverMatch10.0
ORapplemac_os_x_serverMatch10.0.0
ORapplemac_os_x_serverMatch10.0.1
ORapplemac_os_x_serverMatch10.0.2
ORapplemac_os_x_serverMatch10.0.3
ORapplemac_os_x_serverMatch10.0.4
ORapplemac_os_x_serverMatch10.1
ORapplemac_os_x_serverMatch10.1.0
ORapplemac_os_x_serverMatch10.1.1
ORapplemac_os_x_serverMatch10.1.2
ORapplemac_os_x_serverMatch10.1.3
ORapplemac_os_x_serverMatch10.1.4
ORapplemac_os_x_serverMatch10.1.5
ORapplemac_os_x_serverMatch10.2
ORapplemac_os_x_serverMatch10.2.0
ORapplemac_os_x_serverMatch10.2.1
ORapplemac_os_x_serverMatch10.2.2
ORapplemac_os_x_serverMatch10.2.3
ORapplemac_os_x_serverMatch10.2.4
ORapplemac_os_x_serverMatch10.2.5
ORapplemac_os_x_serverMatch10.2.6
ORapplemac_os_x_serverMatch10.2.7
ORapplemac_os_x_serverMatch10.2.8
ORapplemac_os_x_serverMatch10.3
ORapplemac_os_x_serverMatch10.3.0
ORapplemac_os_x_serverMatch10.3.1
ORapplemac_os_x_serverMatch10.3.2
ORapplemac_os_x_serverMatch10.3.3
ORapplemac_os_x_serverMatch10.3.4
ORapplemac_os_x_serverMatch10.3.5
ORapplemac_os_x_serverMatch10.3.6
ORapplemac_os_x_serverMatch10.3.7
ORapplemac_os_x_serverMatch10.3.8
ORapplemac_os_x_serverMatch10.3.9
ORapplemac_os_x_serverMatch10.4
ORapplemac_os_x_serverMatch10.4.0
ORapplemac_os_x_serverMatch10.4.1
ORapplemac_os_x_serverMatch10.4.2
ORapplemac_os_x_serverMatch10.4.3
ORapplemac_os_x_serverMatch10.4.4
ORapplemac_os_x_serverMatch10.4.5
ORapplemac_os_x_serverMatch10.4.6
ORapplemac_os_x_serverMatch10.4.7
ORapplemac_os_x_serverMatch10.4.8
ORapplemac_os_x_serverMatch10.4.9
ORapplemac_os_x_serverMatch10.4.10
ORapplemac_os_x_serverMatch10.4.11
ORapplemac_os_x_serverMatch10.5
ORapplemac_os_x_serverMatch10.5.0
ORapplemac_os_x_serverMatch10.5.1
ORapplemac_os_x_serverMatch10.5.2
ORapplemac_os_x_serverMatch10.5.3
ORapplemac_os_x_serverMatch10.5.4
ORapplemac_os_x_serverMatch10.5.5
ORapplemac_os_x_serverMatch10.5.6
ORapplemac_os_x_serverMatch10.5.7
ORapplemac_os_x_serverMatch10.5.8
ORapplemac_os_x_serverMatch10.6.0
ORapplemac_os_x_serverMatch10.6.1
ORapplemac_os_x_serverMatch10.6.2
ORapplemac_os_x_serverMatch10.6.3
ORapplemac_os_x_serverMatch10.6.4
ORapplemac_os_x_serverMatch10.6.5
ORapplemac_os_x_serverMatch10.6.6
ORapplemac_os_x_serverMatch10.6.7
Related
prion
prion
Cross site scripting
2011-10-14 10:55:00
cvelist
cvelist
CVE-2011-3218
2011-10-14 10:00:00
cve
cve
CVE-2011-3218
2011-10-14 10:55:08
nessus
nessus
QuickTime < 7.7.1 Multiple Vulnerabilities
2011-10-27 00:00:00
QuickTime < 7.7.1 Multiple Vulnerabilities
2011-10-27 00:00:00
QuickTime < 7.7.1 Multiple Vulnerabilities (Windows)
2011-10-28 00:00:00
securityvulns
securityvulns
Apple QuickTime multiple security vulnerabilities
2012-08-20 00:00:00
APPLE-SA-2011-10-26-1 QuickTime 7.7.1
2011-10-31 00:00:00
Apple OS X multiple security vulnerabilities
2011-10-24 00:00:00
openvas
openvas
Apple QuickTime Multiple Denial of Service Vulnerabilities - (Windows)
2011-11-03 00:00:00
Apple QuickTime Multiple Denial of Service Vulnerabilities - Windows
2011-11-03 00:00:00
Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)
2011-10-20 00:00:00
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
4.9
Confidence
High
EPSS
0.002
Percentile
51.4%
Related for NVD:CVE-2011-3218