NetSight
IP …
medium4.3

CVE-2011-0161

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the …

Impact

WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web site.

Affected products

VendorProductAffected versions
AppleSafari
through 5.0.3
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1
AppleWebkit
All versions
AppleIphone Os
through 4.2
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

CWE-20CWE-264

References