CVE-2011-0216

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 21 Jul 2011, 23:00
Last modified:06 Aug 2024, 21:43

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.3 HIGH
v2.0 (nvd)
EPSS Score
3.97% LOW
4% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Jul 2011, 23:00
Published
Vulnerability first disclosed
06 Aug 2024, 21:43
Last Modified
Vulnerability information updated

Description

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.

CVSS Metrics

  • v2.0•HIGH•Score: 9.3AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 3.97%• Percentile: 89%

Techniques & Countermeasures

  • CWE-189•Numeric Errors

    Weaknesses in this category are related to improper calculation or conversion of numbers.

Affected Systems

  • apple•safari

    ≤ 5.0.5 | 1.0 | 1.0:beta | 1.0:beta2 | 1.0.0 | 1.0.0b1 | 1.0.0b2 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.3:85.8 | 1.0.3:85.8.1 | 1.1 | 1.1.0 | 1.1.1 | 1.2 | 1.2.0 | 1.2.1 | 1.2.2 | 1.2.3 | 1.2.4 | 1.2.5 | 1.3 | 1.3.0 | 1.3.1 | 1.3.2 | 1.3.2:312.5 | 1.3.2:312.6 | 2 | 2.0 | 2.0.0 | 2.0.1 | 2.0.2 | 2.0.3 | 2.0.3:417.8 | 2.0.3:417.9 | 2.0.3:417.9.2 | 2.0.3:417.9.3 | 2.0.4 | 3 | 3.0 | 3.0.0 | 3.0.0b | 3.0.1 | 3.0.1b | 3.0.2 | 3.0.2b | 3.0.3 | 3.0.3b | 3.0.4 | 3.0.4b | 3.1.0 | 3.1.0b | 3.1.1 | 3.1.2 | 3.2.0 | 3.2.1 | 3.2.2 | 4.1 | 4.1.1 | 4.1.2 | 5.0 | 5.0.1 | 5.0.2 | 5.0.3 | 5.0.4

References (10)