CVE-2012-0676

WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - product-security@apple.com

Published

2012-05-11

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Safari (Apple)

References

• http://lists.apple.com/archives/security-announce/2012/May/msg00002.html
• http://osvdb.org/81787
• http://secunia.com/advisories/47292
• http://support.apple.com/kb/HT5282
• http://www.securitytracker.com/id?1027053
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75474