Lucene search
RootSSV:23106HistoryOct 17, 2011 - 12:00 a.m.
Apple Safari file:// URL远程代码执行漏洞
2011-10-1700:00:00
Root
www.seebug.org
12
0.909 High
EPSS
Percentile
98.6%
CVE ID: CVE-2011-3230
Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。
Safari在处理file:// URL时存在策略问题，浏览恶意网站可导致任意代码执行。此漏洞不影响Windows系统。
Apple Mac OS X 10.6.8
Apple Mac OS X Server v10.6.8
厂商补丁：
Apple
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
Related
packetstorm
packetstorm
Apple Safari Arbitrary Code Execution
2011-10-15 00:00:00
Apple Safari file:// Arbitrary Code Execution
2011-10-17 00:00:00
prion
prion
Code injection
2011-10-14 10:55:00
checkpoint_advisories
checkpoint_advisories
Apple Safari file URL Arbitrary Code Execution (CVE-2011-3230)
2011-10-13 00:00:00
seebug
seebug
Apple Safari Arbitrary Code Execution
2011-10-15 00:00:00
Apple Safari file:// Arbitrary Code Execution
2014-07-01 00:00:00
cve
cve
CVE-2011-3230
2011-10-14 10:55:00
threatpost
threatpost
Apple Ships Mammoth Security Update for OS X
2011-10-13 15:09:46
metasploit
metasploit
Apple Safari file:// Arbitrary Code Execution
2011-10-16 19:31:09
exploitdb
exploitdb
Apple Safari - 'file://' Arbitrary Code Execution (Metasploit)
2011-10-17 00:00:00
securityvulns
securityvulns
Apple Safari / WebKit multiple security vulnerabilities
2011-10-15 00:00:00
APPLE-SA-2011-10-12-4 Safari 5.1.1
2011-10-15 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 5.1.1
2011-10-13 00:00:00
openvas
openvas
Apple MAC OS X v10.6.8 Safari Multiple Vulnerabilities
2011-10-20 00:00:00
Apple Mac OS X v10.6.8 Safari Multiple Vulnerabilities
2011-10-20 00:00:00