VendorsApplesafari5.0.4
Vulnerabilities

Apple Safari 5.0.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

124CVEs
CVE-2012-3696
CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP request splitting attacks via a crafted web site that leverages improper WebSockets URI handling.
Published 2012-07-25 · Modified
4.3EPSS 0.009
CVE-2012-0678
Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML via a feed:// URL.
Published 2012-07-25 · Modified
4.3EPSS 0.009
CVE-2012-3694
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to obtain sensitive information about full pathnames via a crafted web site.
Published 2012-07-25 · Modified
4.3EPSS 0.009
CVE-2012-3690
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to read arbitrary files via a crafted web site.
Published 2012-07-25 · Modified
4.3EPSS 0.009
← Prev4 / 4