VulnerabilityModified
CVE-2011-0163
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a…
MEDIUM 4.3EPSS 1.59%
Does this matter?
Lower severity and a low EPSS score (1.59%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle unspecified "cached resources," which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
- EPSS
- 1.59% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- apple/safari · apple/webkit · apple/iphone os
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlVendor Advisory
- http://support.apple.com/kb/HT4564Vendor Advisory
- http://support.apple.com/kb/HT4566Vendor Advisory
- http://www.securitytracker.com/id?1025182
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66001
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.htmlVendor Advisory
- http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.htmlVendor Advisory
- http://support.apple.com/kb/HT4564Vendor Advisory
- http://support.apple.com/kb/HT4566Vendor Advisory
- http://www.securitytracker.com/id?1025182
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66001
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.