CVE-2011-0167 The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a c...
MediumCVSS 4.3
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | <= 5.0.3 | No fix listed |
| apple Safari | = 1.0 | No fix listed |
| apple Safari | = 1.0-beta | No fix listed |
| apple Safari | = 1.0-beta2 | No fix listed |
| apple Safari | = 1.0.0 | No fix listed |
| apple Safari | = 1.0.0b1 | No fix listed |
| apple Safari | = 1.0.0b2 | No fix listed |
| apple Safari | = 1.0.1 | No fix listed |
| apple Safari | = 1.0.2 | No fix listed |
| apple Safari | = 1.0.3 | No fix listed |
| apple Safari | = 1.0.3-85.8 | No fix listed |
| apple Safari | = 1.0.3-85.8.1 | No fix listed |
| apple Safari | = 1.1 | No fix listed |
| apple Safari | = 1.1.0 | No fix listed |
| apple Safari | = 1.1.1 | No fix listed |
| apple Safari | = 1.2 | No fix listed |
| apple Safari | = 1.2.0 | No fix listed |
| apple Safari | = 1.2.1 | No fix listed |
| apple Safari | = 1.2.2 | No fix listed |
| apple Safari | = 1.2.3 | No fix listed |
| apple Safari | = 1.2.4 | No fix listed |
| apple Safari | = 1.2.5 | No fix listed |
| apple Safari | = 1.3 | No fix listed |
| apple Safari | = 1.3.0 | No fix listed |
| apple Safari | = 1.3.1 | No fix listed |
Show 40 more
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | = 1.3.2 | No fix listed |
| apple Safari | = 1.3.2-312.5 | No fix listed |
| apple Safari | = 1.3.2-312.6 | No fix listed |
| apple Safari | = 2 | No fix listed |
| apple Safari | = 2.0 | No fix listed |
| apple Safari | = 2.0.0 | No fix listed |
| apple Safari | = 2.0.1 | No fix listed |
| apple Safari | = 2.0.2 | No fix listed |
| apple Safari | = 2.0.3 | No fix listed |
| apple Safari | = 2.0.3-417.8 | No fix listed |
| apple Safari | = 2.0.3-417.9 | No fix listed |
| apple Safari | = 2.0.3-417.9.2 | No fix listed |
| apple Safari | = 2.0.3-417.9.3 | No fix listed |
| apple Safari | = 2.0.4 | No fix listed |
| apple Safari | = 3 | No fix listed |
| apple Safari | = 3.0 | No fix listed |
| apple Safari | = 3.0.0 | No fix listed |
| apple Safari | = 3.0.0b | No fix listed |
| apple Safari | = 3.0.1 | No fix listed |
| apple Safari | = 3.0.1b | No fix listed |
| apple Safari | = 3.0.2 | No fix listed |
| apple Safari | = 3.0.2b | No fix listed |
| apple Safari | = 3.0.3 | No fix listed |
| apple Safari | = 3.0.3b | No fix listed |
| apple Safari | = 3.0.4 | No fix listed |
| apple Safari | = 3.0.4b | No fix listed |
| apple Safari | = 3.1.0 | No fix listed |
| apple Safari | = 3.1.0b | No fix listed |
| apple Safari | = 3.1.1 | No fix listed |
| apple Safari | = 3.1.2 | No fix listed |
| apple Safari | = 3.2.0 | No fix listed |
| apple Safari | = 3.2.1 | No fix listed |
| apple Safari | = 3.2.2 | No fix listed |
| apple Safari | = 4.1 | No fix listed |
| apple Safari | = 4.1.1 | No fix listed |
| apple Safari | = 4.1.2 | No fix listed |
| apple Safari | = 5.0 | No fix listed |
| apple Safari | = 5.0.1 | No fix listed |
| apple Safari | = 5.0.2 | No fix listed |
| apple webkit | All versions | No fix listed |
References
- APPLE-SA-2011-03-09-2 vendor-advisory
- support.apple.com vendor-advisory
- 46816 vdb-entry
- 1025183 vdb-entry