NetSight
IP …
medium5.0

CVE-2011-3246

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended…

Impact

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.7.0, 10.7.1
AppleMac Os X Server
Versions 10.7.0, 10.7.1
AppleIphone Os
Versions 3.0, 3.1, 3.1.2, 3.1.3, 3.2, 3.2.1

Weakness classification

CWE-200

References