Lucene search

K
nvd[email protected]NVD:CVE-2013-0974
HistoryJan 29, 2013 - 5:58 a.m.

CVE-2013-0974

2013-01-2905:58:55
web.nvd.nist.gov
1

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.

Affected configurations

NVD
Node
appleiphone_osRange6.0.2
OR
appleiphone_osMatch6.0
OR
appleiphone_osMatch6.0.1

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.1%

Related for NVD:CVE-2013-0974