PT-2012-1742
CVE-2011-3844
·
Published
2012-03-08
·
Updated
2018-01-06
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Apple Safari version 5.0.5
Description
The issue is related to the improper implementation of the
setInterval function, which allows remote attackers to spoof the address bar via a crafted web page.Recommendations
For Apple Safari version 5.0.5, consider disabling the use of the
setInterval function until a patch is available. Restrict access to potentially malicious web pages to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾