HIGH · 9.3

CVE-2011-0221

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a differe...

Vulnerability Description

WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
AppleSafari<= 5.0.5
AppleWebkitAll versions
AppleMac Os X10.5.8
AppleMac Os X Server10.5.8
MicrosoftWindows 7All versions
MicrosoftWindows VistaAll versions
MicrosoftWindows XpAll versions

Related Weaknesses (CWE)

References

FAQ

What is CVE-2011-0221?

CVE-2011-0221 is a vulnerability with a CVSS score of 9.3 (HIGH). WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a differe...

How severe is CVE-2011-0221?

CVE-2011-0221 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-0221?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Apple Webkit, Apple Mac Os X, Apple Mac Os X Server, Microsoft Windows 7.