Lucene search

K
nvd[email protected]NVD:CVE-2012-3715
HistorySep 20, 2012 - 9:55 p.m.

CVE-2012-3715

2012-09-2021:55:02
CWE-310
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.4

Confidence

Low

EPSS

0.003

Percentile

70.8%

Apple Safari before 6.0.1 makes http requests for https URIs in certain circumstances involving a paste into the address bar, which allows user-assisted remote attackers to obtain sensitive information by sniffing the network.

Affected configurations

Nvd
Node
applesafari
OR
applesafariRange6.0
OR
applesafariMatch1.0
OR
applesafariMatch1.0beta
OR
applesafariMatch1.0beta2
OR
applesafariMatch1.0.0
OR
applesafariMatch1.0.0b1
OR
applesafariMatch1.0.0b2
OR
applesafariMatch1.0.1
OR
applesafariMatch1.0.2
OR
applesafariMatch1.0.3
OR
applesafariMatch1.0.385.8
OR
applesafariMatch1.0.385.8.1
OR
applesafariMatch1.0b1-mac
OR
applesafariMatch1.1
OR
applesafariMatch1.1.0
OR
applesafariMatch1.1.1
OR
applesafariMatch1.2
OR
applesafariMatch1.2.0
OR
applesafariMatch1.2.1
OR
applesafariMatch1.2.2
OR
applesafariMatch1.2.3
OR
applesafariMatch1.2.4
OR
applesafariMatch1.2.5
OR
applesafariMatch1.3
OR
applesafariMatch1.3.0
OR
applesafariMatch1.3.1
OR
applesafariMatch1.3.2
OR
applesafariMatch1.3.2312.5
OR
applesafariMatch1.3.2312.6
OR
applesafariMatch2
OR
applesafariMatch2.0
OR
applesafariMatch2.0.0
OR
applesafariMatch2.0.1
OR
applesafariMatch2.0.2
OR
applesafariMatch2.0.3
OR
applesafariMatch2.0.3417.8
OR
applesafariMatch2.0.3417.9
OR
applesafariMatch2.0.3417.9.2
OR
applesafariMatch2.0.3417.9.3
OR
applesafariMatch2.0.4
OR
applesafariMatch2.0.4-mac
OR
applesafariMatch3
OR
applesafariMatch3.0
OR
applesafariMatch3.0.0
OR
applesafariMatch3.0.0-mac
OR
applesafariMatch3.0.0b
OR
applesafariMatch3.0.0b-windows
OR
applesafariMatch3.0.1
OR
applesafariMatch3.0.1-mac
OR
applesafariMatch3.0.1beta
OR
applesafariMatch3.0.1b
OR
applesafariMatch3.0.1b-windows
OR
applesafariMatch3.0.2
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.2b
OR
applesafariMatch3.0.2b-windows
OR
applesafariMatch3.0.3
OR
applesafariMatch3.0.3-mac
OR
applesafariMatch3.0.3b
OR
applesafariMatch3.0.3b-windows
OR
applesafariMatch3.0.4
OR
applesafariMatch3.0.4-mac
OR
applesafariMatch3.0.4b
OR
applesafariMatch3.0.4b-windows
OR
applesafariMatch3.1.0
OR
applesafariMatch3.1.0-mac
OR
applesafariMatch3.1.0b
OR
applesafariMatch3.1.0b-windows
OR
applesafariMatch3.1.1
OR
applesafariMatch3.1.1b-windows
OR
applesafariMatch3.1.2
OR
applesafariMatch3.1.2b-windows
OR
applesafariMatch3.2.0
OR
applesafariMatch3.2.0b-windows
OR
applesafariMatch3.2.1
OR
applesafariMatch3.2.1b-windows
OR
applesafariMatch3.2.2
OR
applesafariMatch3.2.2b-windows
OR
applesafariMatch4.0
OR
applesafariMatch4.0beta
OR
applesafariMatch4.0.0b
OR
applesafariMatch4.0.1
OR
applesafariMatch4.0.2
OR
applesafariMatch4.0.3
OR
applesafariMatch4.0.4
OR
applesafariMatch4.0.5
OR
applesafariMatch4.1
OR
applesafariMatch4.1.1
OR
applesafariMatch4.1.2
OR
applesafariMatch5.0
OR
applesafariMatch5.0.1
OR
applesafariMatch5.0.2
OR
applesafariMatch5.0.4
OR
applesafariMatch5.0.5
OR
applesafariMatch5.0.6
OR
applesafariMatch5.1
OR
applesafariMatch5.1.1
OR
applesafariMatch5.1.2
OR
applesafariMatch5.1.3
OR
applesafariMatch5.1.4
OR
applesafariMatch5.1.5
OR
applesafariMatch5.1.6
OR
applesafariMatch5.1.7
VendorProductVersionCPE
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
applesafari1.0cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*
applesafari1.0cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*
applesafari1.0cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*
applesafari1.0.0cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*
applesafari1.0.0b1cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*
applesafari1.0.0b2cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*
applesafari1.0.1cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*
applesafari1.0.2cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*
applesafari1.0.3cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*
Rows per page:
1-10 of 1031

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

5.4

Confidence

Low

EPSS

0.003

Percentile

70.8%