CVE

Id
48081  
CVE No.
CVE-2011-0169  
Status
Candidate  
Description
WebKit in Apple Safari before 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted web site.  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
522857 48081 CVE-2011-0169 CONFIRM:http://support.apple.com/kb/HT4566  View
522858 48081 CVE-2011-0169 APPLE:APPLE-SA-2011-03-09-2  View
522859 48081 CVE-2011-0169 URL:http://lists.apple.com/archives/security-announce/2011//Mar/msg00004.html  View
522860 48081 CVE-2011-0169 BID:46809  View
522861 48081 CVE-2011-0169 URL:http://www.securityfocus.com/bid/46809  View
522862 48081 CVE-2011-0169 SECTRACK:1025183  View
522863 48081 CVE-2011-0169 URL:http://www.securitytracker.com/id?1025183  View
522864 48081 CVE-2011-0169 XF:safari-commandlineapi-xss(66006)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31161 JVNDB-2011-001400 Apple Mac OS X の Apple Type Services におけるヒープベースのバッファオーバーフローの脆弱性 Apple Mac OS X の Apple Type Services (ATS) には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-0174 48081 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001400.html  View