CVE-2011-3243

2011-10-1400:00:00

ubuntu.com

0.003 Low

EPSS

Percentile

68.5%

JSON

Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS
before 5 and Safari before 5.1.1, allows remote attackers to inject
arbitrary web script or HTML via vectors involving inactive DOM windows.

Notes

Author	Note
jdstrand	qt4-x11 unmaintained upstream (see README.webkit for details) marking chromium-browser as fixed since it has 22+ on all releases and they sync with upstream webkit every few weeks

OSVersionArchitecturePackageVersionFilename
ubuntuupstreamnoarchqt4-x11< anyUNKNOWN
ubuntuupstreamnoarchqtwebkit-source< anyUNKNOWN
ubuntuupstreamnoarchwebkitgtk< anyUNKNOWN
ubuntu11.10noarchchromium-browser< 22.0UNKNOWN
ubuntu12.04noarchchromium-browser< 22.0UNKNOWN
ubuntu12.10noarchchromium-browser< 22.0UNKNOWN
ubuntu13.04noarchchromium-browser< 22.0UNKNOWN
ubuntu13.10noarchchromium-browser< 22.0UNKNOWN
ubuntu14.04noarchchromium-browser< 22.0UNKNOWN
ubuntu14.10noarchchromium-browser< 22.0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	upstream	noarch	qt4-x11	< any	UNKNOWN
ubuntu	upstream	noarch	qtwebkit-source	< any	UNKNOWN
ubuntu	upstream	noarch	webkitgtk	< any	UNKNOWN
ubuntu	11.10	noarch	chromium-browser	< 22.0	UNKNOWN
ubuntu	12.04	noarch	chromium-browser	< 22.0	UNKNOWN
ubuntu	12.10	noarch	chromium-browser	< 22.0	UNKNOWN
ubuntu	13.04	noarch	chromium-browser	< 22.0	UNKNOWN
ubuntu	13.10	noarch	chromium-browser	< 22.0	UNKNOWN
ubuntu	14.04	noarch	chromium-browser	< 22.0	UNKNOWN
ubuntu	14.10	noarch	chromium-browser	< 22.0	UNKNOWN