Code injection

2011-03-1122:55:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

88.9%

JSON

MobileSafari in Apple iOS before 4.3 does not properly implement application launching through URL handlers, which allows remote attackers to cause a denial of service (persistent application crash) via crafted JavaScript code.

CPENameOperatorVersion
iphone_oseq3.0
iphone_oseq3.2
iphone_oseq3.1.3
iphone_oseq1.0.2
iphone_oseq4.0.2
iphone_oseq2.2
iphone_oseq1.1.1
iphone_oseq4.1
iphone_oseq2.0.0
iphone_oseq3.1.2

Name	Operator	Version
iphone_os	eq	3.0
iphone_os	eq	3.2
iphone_os	eq	3.1.3
iphone_os	eq	1.0.2
iphone_os	eq	4.0.2
iphone_os	eq	2.2
iphone_os	eq	1.1.1
iphone_os	eq	4.1
iphone_os	eq	2.0.0
iphone_os	eq	3.1.2

Rows per page:

1-10 of 301

References

lists.apple.com/archives/security-announce/2011//Mar/msg00003.html

support.apple.com/kb/HT4564

www.securityfocus.com/bid/46806

www.securitytracker.com/id?1025182

exchange.xforce.ibmcloud.com/vulnerabilities/66002