4.3
CVSSv2

CVE-2012-3695

Published: 25/07/2012 Updated: 22/03/2013
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari prior to 6.0 allows remote malicious users to inject arbitrary web script or HTML by leveraging improper URL canonicalization during the handling of the location.href property.

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari 3.0.1

apple safari 4.0.3

apple safari 3.2.2b

apple safari 3.2.2

apple safari 3.0

apple safari 2.0.4

apple safari 1.3.2

apple safari 3.1.2

apple safari 1.3

apple safari 1.3.1

apple safari 5.1.1

apple safari 4.0.4

apple safari 2.0.3

apple safari 4.1

apple safari 5.0.2

apple safari 3.2.1

apple safari 5.0.4

apple safari 3.2.1b

apple safari 3.2.0

apple safari 5.0

apple safari 3.0.2

apple safari 3.0.3

apple safari 1.2

apple safari 1.2.1

apple safari 4.0.5

apple safari 1.1

apple safari 3.0.4

apple safari 3.1.1

apple safari 2

apple safari 1.0.0

apple safari 1.0.1

apple safari 1.0.0b2

apple safari 2.0.0

apple safari 3.0.2b

apple safari 3.1.0

apple safari 4.1.2

apple safari 1.0b1

apple safari 1.0.2

apple safari 3.0.0

apple safari 3.0.1b

apple safari 3.0.4b

apple safari 5.1.3

apple safari 3.2.0b

apple safari 3.1.2b

apple safari 3

apple safari 1.1.1

apple safari 2.0

apple safari 2.0.1

apple safari 1.2.2

apple safari 1.2.3

apple safari 4.0.2

apple safari 1.0

apple safari 5.0.1

apple safari 1.0.3

apple safari 5.0.5

apple safari 1.3.0

apple safari 1.0.0b1

apple safari 3.0.3b

apple safari 5.0.6

apple safari 3.1.0b

apple safari 5.1.2

apple safari

apple safari 5.1.5

apple safari 3.1.1b

apple safari 4.0.0b

apple safari 4.0.1

apple safari 4.0

apple safari 2.0.2

apple safari 1.2.4

apple safari 1.2.5

apple safari 4.1.1

apple safari 1.2.0

apple safari 1.1.0

apple safari 3.0.0b

apple safari 5.1

apple safari 5.1.4

apple safari 5.1.6