PRIOn knowledge basePRION:CVE-2011-3246Code injection
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.4%
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.
References
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
lists.apple.com/archives/Security-announce/2011/Nov/msg00001.html
lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
support.apple.com/kb/HT4999
support.apple.com/kb/HT5002
support.apple.com/kb/HT5052
support.apple.com/kb/HT5130
www.securityfocus.com/bid/50085
www.securityfocus.com/bid/50115
exchange.xforce.ibmcloud.com/vulnerabilities/70551
Related
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.005 Low
EPSS
Percentile
76.4%