Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2011-1774
HistoryJul 21, 2011 - 12:00 a.m.

CVE-2011-1774

2011-07-2100:00:00
ubuntu.com
ubuntu.com
18

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

0.969 High

EPSS

Percentile

99.7%

JSON

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings,
which allows remote attackers to create arbitrary files, and consequently
execute arbitrary code, via a crafted web site. NOTE: this may overlap
CVE-2011-1425.

Bugs

Notes

Author Note
kees likely CVE-2011-1425
jdstrand per Debian, CVE-2011-1774 is about webkitโ€™s interface to xmlsec code inspection showed only 10.04 LTS is affected

Related

cvelist 2
nvd 2
cve 2
prion 2
openvas 21
centos 1
nessus 14
oraclelinux 1
ubuntucve 1
freebsd 1
debian 1
securityvulns 8
redhat 1
debiancve 1
saint 4
metasploit 1
checkpoint_advisories 1
packetstorm 1
suse 1
gentoo 1
seebug 1
cvelist
cvelist
CVE-2011-1774
2011-07-21 23:00:00
CVE-2011-1425
2011-04-03 01:00:00
nvd
nvd
CVE-2011-1774
2011-07-21 23:55:02
CVE-2011-1425
2011-04-04 12:27:57
cve
cve
CVE-2011-1774
2011-07-21 23:55:02
CVE-2011-1425
2011-04-04 12:27:57
prion
prion
Design/Logic Flaw
2011-07-21 23:55:00
Code injection
2011-04-04 12:27:00
openvas
openvas
Mandriva Update for xmlsec1 MDVSA-2011:063 (xmlsec1)
2011-04-06 00:00:00
CentOS Update for xmlsec1 CESA-2011:0486 centos5 x86_64
2012-07-30 00:00:00
CentOS Update for xmlsec1 CESA-2011:0486 centos5 i386
2011-08-09 00:00:00
centos
centos
xmlsec1 security update
2011-05-05 03:26:09
nessus
nessus
Debian DSA-2219-1 : xmlsec1 - arbitrary file overwrite
2011-04-19 00:00:00
FreeBSD : databases/postgresql*-server -- multiple vulnerabilities (07234e78-e899-11e1-b38d-0023ae8e59f0)
2012-08-20 00:00:00
Mandriva Linux Security Advisory : xmlsec1 (MDVSA-2011:063)
2011-04-05 00:00:00
oraclelinux
oraclelinux
xmlsec1 security and bug fix update
2011-05-04 00:00:00
ubuntucve
ubuntucve
CVE-2011-1425
2011-04-04 00:00:00
freebsd
freebsd
databases/postgresql*-server -- multiple vulnerabilities
2012-08-17 00:00:00
debian
debian
[SECURITY] [DSA 2219-1] xmlsec1 security update
2011-04-18 21:02:30
securityvulns
securityvulns
[ MDVSA-2011:063 ] xmlsec1
2011-04-05 00:00:00
xmlsec library unauthorized access
2011-04-05 00:00:00
APPLE-SA-2011-07-20-1 Safari 5.1 and Safari 5.0.6
2011-07-22 00:00:00
redhat
redhat
(RHSA-2011:0486) Moderate: xmlsec1 security and bug fix update
2011-05-04 00:00:00
debiancve
debiancve
CVE-2011-1425
2011-04-04 12:27:57
saint
saint
Apple Safari libxslt File Create
2011-10-24 00:00:00
Apple Safari libxslt File Create
2011-10-24 00:00:00
Apple Safari libxslt File Create
2011-10-24 00:00:00
metasploit
metasploit
Cross Platform Webkit File Dropper
2011-10-18 16:30:28
checkpoint_advisories
checkpoint_advisories
Apple Safari Webkit libxslt Arbitrary File Creation (CVE-2011-1774)
2011-12-27 00:00:00
packetstorm
packetstorm
Apple Safari Webkit libxslt Arbitrary File Creation
2011-10-18 00:00:00
suse
suse
Security update for libwebkit (important)
2011-08-02 01:08:15
gentoo
gentoo
Multiple packages, Multiple vulnerabilities fixed in 2011
2014-12-11 00:00:00
seebug
seebug
Apple iTunesๅคšไธชๅฎ‰ๅ…จๆผๆดž
2011-10-13 00:00:00

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

0.969 High

EPSS

Percentile

99.7%

JSON
Related for UB:CVE-2011-1774
cvelist2nvd2cve2prion2openvas21centos1nessus14oraclelinux1ubuntucve1freebsd1debian1securityvulns8redhat1debiancve1saint4metasploit1checkpoint_advisories1packetstorm1suse1gentoo1seebug1