CVE-2012-0674: Input Validation
Published May 8, 2012
·Updated
Safari in Apple iOS before 5.1.1 allows remote attackers to spoof the location bar's URL via a crafted web site.
Affected Software
40 affected components
apple iPhone OS<=5.1
apple iPhone OS<=5.1
apple iPhone OS<=5.1
apple iPhone OS=3.0
apple iPhone OS=3.1
apple iPhone OS=3.1
apple iPhone OS=3.1
apple iPhone OS=3.1.2
apple iPhone OS=3.1.3
apple iPhone OS=3.2
apple iPhone OS=3.2
apple iPhone OS=3.2.1
apple iPhone OS=3.2.1
apple iPhone OS=3.2.2
apple iPhone OS=4.0
apple iPhone OS=4.0
apple iPhone OS=4.0
apple iPhone OS=4.0.1
apple iPhone OS=4.0.1
apple iPhone OS=4.0.1
apple iPhone OS=4.0.2
apple iPhone OS=4.1
apple iPhone OS=4.2.1
apple iPhone OS=4.2.5
apple iPhone OS=4.2.8
apple iPhone OS=4.3.0
apple iPhone OS=4.3.1
apple iPhone OS=4.3.2
apple iPhone OS=4.3.3
apple iPhone OS=4.3.5
apple iPhone OS=4.3.5
apple iPhone OS=4.3.5
apple iPhone OS=5.0
apple iPhone OS=5.0
apple iPhone OS=5.0
apple iPhone OS=5.0
apple iPhone OS=5.0.1
apple iPhone OS=5.0.1
apple iPhone OS=5.0.1
apple iPhone OS=5.0.1
Event History
May 8, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0674?
CVE-2012-0674 has been rated as a moderate severity vulnerability.
2
How do I fix CVE-2012-0674?
To fix CVE-2012-0674, update your Apple iOS devices to version 5.1.1 or later.
3
What does CVE-2012-0674 affect?
CVE-2012-0674 affects Safari on Apple iOS versions prior to 5.1.1.
4
What type of attack does CVE-2012-0674 enable?
CVE-2012-0674 enables remote attackers to spoof the browser's location bar URL.
5
Is CVE-2012-0674 present in later versions of iOS?
CVE-2012-0674 is not present in iOS version 5.1.1 and later.