Lucene search

PRIOn knowledge basePRION:CVE-2011-3218

HistoryOct 14, 2011 - 10:55 a.m.

Cross site scripting

2011-10-1410:55:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

50.3%

JSON

The “Save for Web” selection in QuickTime Player in Apple Mac OS X through 10.6.8 exports HTML documents that contain an http link to a script file, which allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks by spoofing the http server during local viewing of an exported document.

CPENameOperatorVersion
mac_os_xeq10.5.8
mac_os_xeq10.4.3
mac_os_xeq10.2.5
mac_os_xeq10.6.7
mac_os_xeq10.2.7
mac_os_xeq10.0.2
mac_os_xeq10.2.8
mac_os_xeq10.2.1
mac_os_xeq10.5.6
mac_os_xle10.6.8

Name	Operator	Version
mac_os_x	eq	10.5.8
mac_os_x	eq	10.4.3
mac_os_x	eq	10.2.5
mac_os_x	eq	10.6.7
mac_os_x	eq	10.2.7
mac_os_x	eq	10.0.2
mac_os_x	eq	10.2.8
mac_os_x	eq	10.2.1
mac_os_x	eq	10.5.6
mac_os_x	le	10.6.8

Rows per page:

1-10 of 1321

References

lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html

osvdb.org/76373

support.apple.com/kb/HT5002

support.apple.com/kb/HT5016

www.securityfocus.com/bid/50085

www.securityfocus.com/bid/50122

5.2 Medium

AI Score

Confidence

High

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

50.3%

JSON

Related for PRION:CVE-2011-3218