NetSight
IP …
high8.8Public exploit code

CVE-2011-1774

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute a…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.

Affected products

VendorProductAffected versions
AppleSafari
through 5.0.5
Versions 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1
AppleWebkit
All versions

Weakness classification

CWE-20

References