CVE-2011-3058: apple iphone_os

Modified

Published 30-03-2012Last modified 06-08-2024

Vulnerability summary

CVE-2011-3058 is a medium (CVSS 4.3) vulnerability in apple iphone_os. EPSS estimates a 1.54% chance of exploitation in the next 30 days, higher than 74.9% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

1.54%

0%100%

Low · +0.02 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 2 · Related 2

OPENSUSE-SU-2024:10171-1 OPENSUSE-SU-2024:12948-1

Timeline

30-03-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

1.54%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

Increase +0.02 pp

From 1.52% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (code.google.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-79Improper Neutralization of Input During Web Page GenerationThe product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Apple2 products

iphone_os< 6.0.1
mac_os_x< 10.8.3

Google1 product

chrome< 18.0.1025.142

2 vendors · 3 products

References

12 links

www.securitytracker.com/id?1026877VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/48618Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.apple.com/kb/HT5642X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/48691Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2013/Mar/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
googlechromereleases.blogspot.com/2012/03/stable-channel-release-and-beta-channel.htmlX Refsource CONFIRMRelease NotesVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15492VDB EntrySignatureX Refsource OVALThird Party Advisory
www.securityfocus.com/bid/52762VDB EntryX Refsource BIDThird Party Advisory
lists.apple.com/archives/security-announce/2013/Jan/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/74408VDB EntryX Refsource XFThird Party Advisory

Show all 12 references

code.google.com/p/chromium/issues/detail?id=109574X Refsource CONFIRMExploitVendor Advisory
secunia.com/advisories/48763Third Party AdvisoryX Refsource SECUNIA