CVE-2012-3695 | BDVDB-2026-51268 Detail

Description#

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML by leveraging improper URL canonicalization during the handling of the location.href property.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
http://support.apple.com/kb/HT5503
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
http://www.securityfocus.com/bid/54695
http://support.apple.com/kb/HT5400

Exploit#

No public exploit known

History#

Version 12012-07-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.