CVE

Id
48073  
CVE No.
CVE-2011-0161  
Status
Candidate  
Description
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web site.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
522782 48073 CVE-2011-0161 CONFIRM:http://support.apple.com/kb/HT4564  View
522783 48073 CVE-2011-0161 CONFIRM:http://support.apple.com/kb/HT4566  View
522784 48073 CVE-2011-0161 APPLE:APPLE-SA-2011-03-09-1  View
522785 48073 CVE-2011-0161 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00003.html  View
522786 48073 CVE-2011-0161 APPLE:APPLE-SA-2011-03-09-2  View
522787 48073 CVE-2011-0161 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html  View
522788 48073 CVE-2011-0161 BID:46814  View
522789 48073 CVE-2011-0161 URL:http://www.securityfocus.com/bid/46814  View
522790 48073 CVE-2011-0161 SECTRACK:1025182  View
522791 48073 CVE-2011-0161 URL:http://www.securitytracker.com/id?1025182  View
522792 48073 CVE-2011-0161 XF:appleios-attr-code-execution(66000)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31131 JVNDB-2011-001370 Apple Safari の HTML5 ドラッグ＆ドロップの機能における重要な情報を取得される脆弱性 Apple Safari の WebKit にある HTML5 ドラッグ＆ドロップの機能は、同一生成元ポリシーを回避されるため、重要な情報を取得される脆弱性が存在します。 CVE-2011-0166 48073 5.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001370.html  View