Lucene search
HistoryJul 21, 2011 - 11:55 p.m.
CVE-2011-1774
cve-2011-1774
webkit
apple safari
libxslt
security settings
remote attackers
arbitrary files
arbitrary code
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.969 High
EPSS
Percentile
99.7%
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.
Affected configurations
Node
applesafariRangeโค5.0.5
ORapplesafariMatch1.0
ORapplesafariMatch1.0beta
ORapplesafariMatch1.0beta2
ORapplesafariMatch1.0.0
ORapplesafariMatch1.0.0b1
ORapplesafariMatch1.0.0b2
ORapplesafariMatch1.0.1
ORapplesafariMatch1.0.2
ORapplesafariMatch1.0.3
ORapplesafariMatch1.0.385.8
ORapplesafariMatch1.0.385.8.1
ORapplesafariMatch1.1
ORapplesafariMatch1.1.0
ORapplesafariMatch1.1.1
ORapplesafariMatch1.2
ORapplesafariMatch1.2.0
ORapplesafariMatch1.2.1
ORapplesafariMatch1.2.2
ORapplesafariMatch1.2.3
ORapplesafariMatch1.2.4
ORapplesafariMatch1.2.5
ORapplesafariMatch1.3
ORapplesafariMatch1.3.0
ORapplesafariMatch1.3.1
ORapplesafariMatch1.3.2
ORapplesafariMatch1.3.2312.5
ORapplesafariMatch1.3.2312.6
ORapplesafariMatch2
ORapplesafariMatch2.0
ORapplesafariMatch2.0.0
ORapplesafariMatch2.0.1
ORapplesafariMatch2.0.2
ORapplesafariMatch2.0.3
ORapplesafariMatch2.0.3417.8
ORapplesafariMatch2.0.3417.9
ORapplesafariMatch2.0.3417.9.2
ORapplesafariMatch2.0.3417.9.3
ORapplesafariMatch2.0.4
ORapplesafariMatch3
ORapplesafariMatch3.0
ORapplesafariMatch3.0.0
ORapplesafariMatch3.0.0b
ORapplesafariMatch3.0.1
ORapplesafariMatch3.0.1b
ORapplesafariMatch3.0.2
ORapplesafariMatch3.0.2b
ORapplesafariMatch3.0.3
ORapplesafariMatch3.0.3b
ORapplesafariMatch3.0.4
ORapplesafariMatch3.0.4b
ORapplesafariMatch3.1.0
ORapplesafariMatch3.1.0b
ORapplesafariMatch3.1.1
ORapplesafariMatch3.1.2
ORapplesafariMatch3.2.0
ORapplesafariMatch3.2.1
ORapplesafariMatch3.2.2
ORapplesafariMatch4.1
ORapplesafariMatch4.1.1
ORapplesafariMatch4.1.2
ORapplesafariMatch5.0
ORapplesafariMatch5.0.1
ORapplesafariMatch5.0.2
ORapplesafariMatch5.0.3
ORapplesafariMatch5.0.4
ORapplewebkit
applemac_os_xMatch10.5.8
ORapplemac_os_xMatch10.6.8
ORapplemac_os_xMatch10.6.9
ORapplemac_os_xMatch10.7.0
ORapplemac_os_x_serverMatch10.5.8
ORapplemac_os_x_serverMatch10.6.8
ORapplemac_os_x_serverMatch10.6.9
ORapplemac_os_x_serverMatch10.7.0
ORmicrosoftwindows_7
ORmicrosoftwindows_vista
ORmicrosoftwindows_xpsp2
ORmicrosoftwindows_xpsp3
References
lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
securityreason.com/securityalert/8481
support.apple.com/kb/HT4808
support.apple.com/kb/HT4981
support.apple.com/kb/HT4999
Related
cvelist
cvelist
CVE-2011-1774
2011-07-21 23:00:00
CVE-2011-1425
2011-04-03 01:00:00
nvd
nvd
CVE-2011-1774
2011-07-21 23:55:02
CVE-2011-1425
2011-04-04 12:27:57
ubuntucve
ubuntucve
CVE-2011-1774
2011-07-21 00:00:00
CVE-2011-1425
2011-04-04 00:00:00
prion
prion
Design/Logic Flaw
2011-07-21 23:55:00
Code injection
2011-04-04 12:27:00
saint
saint
Apple Safari libxslt File Create
2011-10-24 00:00:00
Apple Safari libxslt File Create
2011-10-24 00:00:00
Apple Safari libxslt File Create
2011-10-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Apple Safari Webkit libxslt Arbitrary File Creation (CVE-2011-1774)
2011-12-27 00:00:00
packetstorm
packetstorm
Apple Safari Webkit libxslt Arbitrary File Creation
2011-10-18 00:00:00
nessus
nessus
SuSE 11.1 Security Update : libwebkit (SAT Patch Number 4917)
2011-07-29 00:00:00
FreeBSD : databases/postgresql*-server -- multiple vulnerabilities (07234e78-e899-11e1-b38d-0023ae8e59f0)
2012-08-20 00:00:00
Debian DSA-2219-1 : xmlsec1 - arbitrary file overwrite
2011-04-19 00:00:00
metasploit
metasploit
Cross Platform Webkit File Dropper
2011-10-18 16:30:28
suse
suse
Security update for libwebkit (important)
2011-08-02 01:08:15
freebsd
freebsd
databases/postgresql*-server -- multiple vulnerabilities
2012-08-17 00:00:00
openvas
openvas
Mandriva Update for xmlsec1 MDVSA-2011:063 (xmlsec1)
2011-04-06 00:00:00
CentOS Update for xmlsec1 CESA-2011:0486 centos5 x86_64
2012-07-30 00:00:00
CentOS Update for xmlsec1 CESA-2011:0486 centos5 i386
2011-08-09 00:00:00
centos
centos
xmlsec1 security update
2011-05-05 03:26:09
oraclelinux
oraclelinux
xmlsec1 security and bug fix update
2011-05-04 00:00:00
cve
cve
CVE-2011-1425
2011-04-04 12:27:57
debian
debian
[SECURITY] [DSA 2219-1] xmlsec1 security update
2011-04-18 21:02:30
securityvulns
securityvulns
[ MDVSA-2011:063 ] xmlsec1
2011-04-05 00:00:00
xmlsec library unauthorized access
2011-04-05 00:00:00
APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6
2011-07-22 00:00:00
redhat
redhat
(RHSA-2011:0486) Moderate: xmlsec1 security and bug fix update
2011-05-04 00:00:00
debiancve
debiancve
CVE-2011-1425
2011-04-04 12:27:57
seebug
seebug
Apple iTunesๅคไธชๅฎๅ
จๆผๆด
2011-10-13 00:00:00
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00
8.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.969 High
EPSS
Percentile
99.7%
Related for CVE-2011-1774