VulnerabilityModified
CVE-2012-0676
WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.
MEDIUM 5.0EPSS 2.08%
Does this matter?
Lower severity and a low EPSS score (2.08%). Track it; it rarely justifies an emergency change on its own.
Description
WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.08% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- apple/safari
- Source
- product-security@apple.com
References
- http://lists.apple.com/archives/security-announce/2012/May/msg00002.htmlVendor Advisory
- http://osvdb.org/81787
- http://secunia.com/advisories/47292
- http://support.apple.com/kb/HT5282Vendor Advisory
- http://www.securitytracker.com/id?1027053
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75474
- http://lists.apple.com/archives/security-announce/2012/May/msg00002.htmlVendor Advisory
- http://osvdb.org/81787
- http://secunia.com/advisories/47292
- http://support.apple.com/kb/HT5282Vendor Advisory
- http://www.securitytracker.com/id?1027053
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75474
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.