PT-2011-4338
CVE-2011-3246
·
Published
2011-10-14
·
Updated
2017-08-29
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 5.0.1
Apple Mac OS X versions prior to 10.7.2
Description
The issue allows remote attackers to trigger visits to unintended web sites and transmit cookies to unintended web sites via a crafted http or https URL, due to improper URL parsing.
Recommendations
For Apple iOS versions prior to 5.0.1, update to version 5.0.1 or later.
For Apple Mac OS X versions prior to 10.7.2, update to version 10.7.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾