medium4.3Public exploit code
CVE-2011-0167
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary lo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebKit 1.2.x - Local Webpage Cross Domain Information Disclosure2011-03-09 · remote · windows · Verified
Impact
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | through 5.0.3 Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1 |
| Apple | Webkit | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
- http://support.apple.com/kb/HT4566
- http://www.securityfocus.com/bid/46816
- http://www.securitytracker.com/id?1025183
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html
- http://support.apple.com/kb/HT4566
- http://www.securityfocus.com/bid/46816
- http://www.securitytracker.com/id?1025183