Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple safari 3.0.2b vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-2842
Apple Safari prior to 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote malicious users to read local HTML files via a crafted web site.
Apple Safari 3.2.1Apple Safari 3.2.0Apple Safari 3.0.4Apple Safari 3.0.3bApple Safari 3.0.0Apple Safari 3.0Apple Safari 2.0.2Apple Safari 2.0.1Apple Safari 1.3Apple Safari 1.2.5Apple Safari 1.1.0Apple Safari 1.1Apple Safari 1.0.0b1Apple Safari 1.0.0Apple Safari 4.0.0bApple SafariApple Safari 3.2Apple Safari 3.1.2Apple Safari 3.0.3Apple Safari 3.0.2bApple Safari 2.0.4Apple Safari 2.0.3
NA
CVE-2011-0217
Apple Safari prior to 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote malicious users to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields.
Apple Safari 1.3.1Apple Safari 1.2.2Apple Safari 1.3.2Apple Safari 1.1.1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 5.0.1Apple Safari 2.0.4Apple Safari 3.0.3bApple Safari 2Apple Safari 3.1.1Apple Safari 3.0.1bApple Safari 3.1.0bApple Safari 3.1.0Apple Safari 3.1.2Apple Safari 5.0.4Apple Safari 2.0.1Apple Safari 2.0.3Apple Safari 1.3.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 1.0
NA
CVE-2011-0216
Off-by-one error in libxml in Apple Safari prior to 5.0.6 allows remote malicious users to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
Apple Safari 2.0.1Apple Safari 1.2.2Apple Safari 2.0.2Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 1.0.0Apple Safari 2.0.3Apple Safari 2.0.4Apple Safari 2.0Apple Safari 1.1Apple Safari 3.2.1Apple Safari 3.1.0Apple Safari 3.0.4bApple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.5Apple Safari 1.3Apple Safari 3.0Apple Safari 3.0.3Apple Safari 5.0Apple Safari 1.3.2
NA
CVE-2011-0166
The HTML5 drag and drop functionality in WebKit in Apple Safari prior to 5.0.4 allows user-assisted remote malicious users to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778.
Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 1.2.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 4.1.2Apple Safari 1.0.0Apple Safari 3Apple Safari 2.0.4Apple Safari 3.0.2Apple Safari 3.0.4bApple Safari 3.0.1bApple Safari 3.1.0bApple Safari 2.0.0Apple Safari 2Apple Safari 1.2.5Apple Safari 2.0.2Apple Safari 1.0Apple Safari 5.0.1Apple Safari 3.0.1Apple Safari 3.0.0bApple Safari 3.0.2b
NA
CVE-2011-0167
The windows functionality in WebKit in Apple Safari prior to 5.0.4 allows remote malicious users to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.
Apple Safari 2.0Apple Safari 2.0.1Apple Safari 2.0.3Apple Safari 1.2.3Apple Safari 1.3.1Apple Safari 1.2.1Apple Safari 1.2Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 3.0Apple WebkitApple Safari 3.0.3Apple Safari 3.1.2Apple Safari 3.2.0Apple Safari 1.1Apple Safari 4.1Apple Safari 1.3.2Apple Safari 2.0.2Apple Safari 1.0.3Apple Safari 4.1.2Apple Safari 1.0.0Apple Safari 3.0.0b
NA
CVE-2011-0169
WebKit in Apple Safari prior to 5.0.4, when the Web Inspector is used, does not properly handle the window.console._inspectorCommandLineAPI property, which allows user-assisted remote malicious users to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks ...
Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 1.3.0Apple Safari 1.2.0Apple Safari 1.1.1Apple Safari 1.0.2Apple Safari 1.1.0Apple Safari 1.0.0Apple Safari 1.0.1Apple Safari 1.3Apple Safari 2.0.4Apple Safari 5.0Apple Safari 3.0.4bApple Safari 3.1.0Apple Safari 2.0.0Apple Safari 3.2.1Apple Safari 2Apple Safari 2.0.2Apple Safari 1.0.3Apple Safari 5.0.1Apple Safari 4.1.2Apple Safari 3.0.0b
NA
CVE-2009-2066
Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a s...
Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.1.0Apple Safari 1.1Apple Safari 1.2.5Apple Safari 1.3Apple Safari 2.0Apple Safari 2.0.0Apple Safari 2.0.3Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 0.9Apple Safari 1.0.3Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.3.2Apple Safari 3Apple Safari 3.0
NA
CVE-2009-2062
Apple Safari prior to 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an...
Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.3.2Apple Safari 2Apple Safari 2.0.3Apple Safari 3.0.0Apple Safari 3.0.0bApple Safari 3.0.3Apple Safari 3.0.3bApple Safari 3.1.1Apple Safari 3.1.2Apple Safari 0.8Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.3.0Apple Safari 1.3.1
NA
CVE-2009-2072
Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle malicious users to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request s...
Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.1.0Apple Safari 1.1Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 2.0Apple Safari 2.0.0Apple Safari 2.0.3Apple Safari 2.0.3 417.9.3Apple Safari 3.0.0bApple Safari 3.0.1Apple Safari 3.0.4Apple Safari 3.0.4 BetaApple Safari 3.2Apple Safari 3.2.0Apple Safari 0.8Apple Safari 0.9Apple Safari 1.0.3Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.3.1
NA
CVE-2010-3804
The JavaScript implementation in WebKit in Apple Safari prior to 5.0.3 on Mac OS X 10.5 up to and including 10.6 and Windows, and prior to 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote malicious users to tr...
Apple SafariApple Safari 5.0.1Apple Safari 5.0Apple Safari 3.1.0bApple Safari 3.1.0Apple Safari 3.0.1bApple Safari 3.0.1Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 1.2.3Apple Safari 1.2.2Apple Safari 1.0Apple Safari 1.0.0Apple Safari 3.2.2Apple Safari 3.2.1Apple Safari 3.0.3bApple Safari 3.0.3Apple Safari 3.0Apple Safari 3Apple Safari 2.0.2Apple Safari 2.0.1Apple Safari 1.3.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook