CVE-2013-0974 | BDVDB-2026-54345 Detail

Description#

StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://support.apple.com/kb/HT5642
http://osvdb.org/89658
http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html

Exploit#

No public exploit known

History#

Version 12013-01-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.