4.3
CVSSv2

CVE-2012-3696

Published: 25/07/2012 Updated: 22/03/2013
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

CRLF injection vulnerability in WebKit in Apple Safari prior to 6.0 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP request splitting attacks via a crafted web site that leverages improper WebSockets URI handling.

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari 5.0.4

apple safari 3.2.1b

apple safari 3.2.0

apple safari 5.0

apple safari 3

apple safari 3.0.3

apple safari 2.0

apple safari 1.2

apple safari 1.2.1

apple safari 4.0.5

apple safari 1.1

apple safari 4.0.2

apple safari 3.1.1

apple safari 5.0.1

apple safari 2.0.3

apple safari 1.3.2

apple safari 1.0.0

apple safari 1.0.3

apple safari 1.0.0b2

apple safari 1.0.0b1

apple safari 2.0.4

apple safari 2.0.0

apple safari 3.0.2b

apple safari 5.0.6

apple safari 3.1.0

apple safari 5.1.2

apple safari 3.2.0b

apple safari 3.1.2b

apple safari 1.1.1

apple safari 4.0.1

apple safari 2.0.1

apple safari 2.0.2

apple safari 1.2.2

apple safari 1.2.3

apple safari 1.0

apple safari 5.0.5

apple safari 1.3.0

apple safari 1.2.0

apple safari 3.0.1b

apple safari 3.0.1

apple safari 3.0.3b

apple safari 3.1.0b

apple safari

apple safari 5.1.5

apple safari 3.1.1b

apple safari 4.0.0b

apple safari 4.0

apple safari 1.2.4

apple safari 1.2.5

apple safari 5.1.1

apple safari 4.1.1

apple safari 1.1.0

apple safari 1.0b1

apple safari 3.0.0b

apple safari 3.0.4

apple safari 5.1

apple safari 3.0.4b

apple safari 5.1.4

apple safari 5.1.6

apple safari 4.0.3

apple safari 3.2.1

apple safari 3.2.2b

apple safari 3.2.2

apple safari 3.0

apple safari 3.0.2

apple safari 3.1.2

apple safari 1.3

apple safari 1.3.1

apple safari 4.0.4

apple safari 4.1

apple safari 5.0.2

apple safari 4.1.2

apple safari 2

apple safari 1.0.2

apple safari 1.0.1

apple safari 3.0.0

apple safari 5.1.3