7.1
CVSSv2

CVE-2012-3697

Published: 25/07/2012 Updated: 30/07/2012
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N

Vulnerability Summary

WebKit in Apple Safari prior to 6.0 does not properly handle file: URLs, which allows remote malicious users to bypass intended sandbox restrictions and read arbitrary files by leveraging a WebProcess compromise.

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari 3.2.1b

apple safari 3.2.0b

apple safari 3.1.2b

apple safari 3.1.1b

apple safari 2.0

apple safari 2.0.1

apple safari 2.0.2

apple safari 2.0.3

apple safari 1.1

apple safari 4.0.2

apple safari 1.0

apple safari 1.3.2

apple safari 5.0.5

apple safari 4.0

apple safari 1.0.0b1

apple safari 3.0.1b

apple safari 3.0.1

apple safari 3.0.0b

apple safari 3.0.2b

apple safari 5.0.6

apple safari 3.1.0b

apple safari 5.1

apple safari 5.0

apple safari 3

apple safari 1.1.1

apple safari 4.0.1

apple safari 1.2.1

apple safari 1.2.2

apple safari 1.2.3

apple safari 1.2.4

apple safari 5.0.1

apple safari 1.0.3

apple safari 1.0.0

apple safari 1.3.0

apple safari 1.2.0

apple safari 1.1.0

apple safari 2.0.0

apple safari 3.0.3

apple safari 3.0.3b

apple safari 5.1.2

apple safari

apple safari 5.1.5

apple safari 5.1.4

apple safari 3.2.1

apple safari 3.2.2b

apple safari 3.2.0

apple safari 3.0

apple safari 2.0.4

apple safari 3.1.2

apple safari 1.3

apple safari 4.0.5

apple safari 4.0.4

apple safari 3.1.1

apple safari 4.1

apple safari 5.0.2

apple safari 2

apple safari 1.0.2

apple safari 1.0.0b2

apple safari 3.0.0

apple safari 3.0.4b

apple safari 3.1.0

apple safari 5.1.6

apple safari 4.0.3

apple safari 5.0.4

apple safari 4.0.0b

apple safari 3.2.2

apple safari 3.0.2

apple safari 1.2

apple safari 1.2.5

apple safari 1.3.1

apple safari 5.1.1

apple safari 3.0.4

apple safari 4.1.1

apple safari 4.1.2

apple safari 1.0b1

apple safari 1.0.1

apple safari 5.1.3