CVE-2011-1774: Input Validation
Published Jul 21, 2011
·Updated
WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.
Affected Software
79 affected components
apple Safari<=5.0.5
apple Safari=1.0
apple Safari=1.0-beta
apple Safari=1.0-beta2
apple Safari=1.0.0
apple Safari=1.0.0b1
apple Safari=1.0.0b2
apple Safari=1.0.1
apple Safari=1.0.2
apple Safari=1.0.3
apple Safari=1.0.3-85.8
apple Safari=1.0.3-85.8.1
apple Safari=1.1
apple Safari=1.1.0
apple Safari=1.1.1
apple Safari=1.2
apple Safari=1.2.0
apple Safari=1.2.1
apple Safari=1.2.2
apple Safari=1.2.3
apple Safari=1.2.4
apple Safari=1.2.5
apple Safari=1.3
apple Safari=1.3.0
apple Safari=1.3.1
apple Safari=1.3.2
apple Safari=1.3.2-312.5
apple Safari=1.3.2-312.6
apple Safari=2
apple Safari=2.0
apple Safari=2.0.0
apple Safari=2.0.1
apple Safari=2.0.2
apple Safari=2.0.3
apple Safari=2.0.3-417.8
apple Safari=2.0.3-417.9
apple Safari=2.0.3-417.9.2
apple Safari=2.0.3-417.9.3
apple Safari=2.0.4
apple Safari=3
apple Safari=3.0
apple Safari=3.0.0
apple Safari=3.0.0b
apple Safari=3.0.1
apple Safari=3.0.1b
apple Safari=3.0.2
apple Safari=3.0.2b
apple Safari=3.0.3
apple Safari=3.0.3b
apple Safari=3.0.4
apple Safari=3.0.4b
apple Safari=3.1.0
apple Safari=3.1.0b
apple Safari=3.1.1
apple Safari=3.1.2
apple Safari=3.2.0
apple Safari=3.2.1
apple Safari=3.2.2
apple Safari=4.1
apple Safari=4.1.1
apple Safari=4.1.2
apple Safari=5.0
apple Safari=5.0.1
apple Safari=5.0.2
apple Safari=5.0.3
apple Safari=5.0.4
Apple WebKit
Apple iOS and macOS=10.5.8
Apple iOS and macOS=10.6.8
Apple iOS and macOS=10.6.9
Apple iOS and macOS=10.7.0
Apple Mac OS X Server=10.5.8
Apple Mac OS X Server=10.6.8
Apple Mac OS X Server=10.6.9
Apple Mac OS X Server=10.7.0
Microsoft Windows 7
Microsoft Windows Vista
Microsoft Windows XP=sp2
Microsoft Windows XP=sp3
Remediation
Event History
Jul 21, 2011
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
11:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-1774?
CVE-2011-1774 is rated as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2011-1774?
To fix CVE-2011-1774, users should upgrade to Apple Safari version 5.0.6 or later.
3
Which versions of Safari are affected by CVE-2011-1774?
CVE-2011-1774 affects Apple Safari versions before 5.0.6.
4
What type of vulnerability is CVE-2011-1774?
CVE-2011-1774 is an improper security settings vulnerability in WebKit allowing file creation and code execution.
5
Can CVE-2011-1774 impact macOS devices?
Yes, CVE-2011-1774 can impact macOS devices running vulnerable versions of Apple Safari.