CVE-2012-3655: Buffer Overflow

Q: What is the severity of CVE-2012-3655?

CVE-2012-3655 is considered a critical vulnerability as it can be exploited by remote attackers to execute arbitrary code or cause a denial of service.

Q: How do I fix CVE-2012-3655?

To fix CVE-2012-3655, upgrade Apple Safari to version 6.0 or later, as earlier versions are vulnerable.

Q: Which versions of Safari are affected by CVE-2012-3655?

CVE-2012-3655 affects Apple Safari versions prior to 6.0, including all versions from 1.0 up to 5.1.7.

Q: What type of vulnerability is CVE-2012-3655?

CVE-2012-3655 is categorized as a memory corruption vulnerability, which can lead to application crashes or arbitrary code execution.

Q: What can an attacker achieve by exploiting CVE-2012-3655?

An attacker exploiting CVE-2012-3655 can execute arbitrary code on the affected system or cause the application to crash.

Published Jul 25, 2012

Updated

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.

Affected Software

102 affected components

Safari<=5.1.7

Safari=1.0

Safari=1.0-beta

Safari=1.0-beta2

Safari=1.0.0

Safari=1.0.0b1

Safari=1.0.0b2

Safari=1.0.1

Safari=1.0.2

Safari=1.0.3

Safari=1.0.3-85.8

Safari=1.0.3-85.8.1

Safari=1.0b1

Safari=1.1

Safari=1.1.0

Safari=1.1.1

Safari=1.2

Safari=1.2.0

Safari=1.2.1

Safari=1.2.2

Safari=1.2.3

Safari=1.2.4

Safari=1.2.5

Safari=1.3

Safari=1.3.0

Safari=1.3.1

Safari=1.3.2

Safari=1.3.2-312.5

Safari=1.3.2-312.6

Safari=2

Safari=2.0

Safari=2.0.0

Safari=2.0.1

Safari=2.0.2

Safari=2.0.3

Safari=2.0.3-417.8

Safari=2.0.3-417.9

Safari=2.0.3-417.9.2

Safari=2.0.3-417.9.3

Safari=2.0.4

Safari=3

Safari=3.0

Safari=3.0.0

Safari=3.0.0b

Safari=3.0.1

Safari=3.0.1-beta

Safari=3.0.1b

Safari=3.0.2

Safari=3.0.2b

Safari=3.0.3

Safari=3.0.3b

Safari=3.0.4

Safari=3.0.4b

Safari=3.1.0

Safari=3.1.0b

Safari=3.1.1

Safari=3.1.1b

Safari=3.1.2

Safari=3.1.2b

Safari=3.2.0

Safari=3.2.0b

Safari=3.2.1

Safari=3.2.1b

Safari=3.2.2

Safari=3.2.2b

Safari=4.0

Safari=4.0-beta

Safari=4.0.0b

Safari=4.0.1

Safari=4.0.2

Safari=4.0.3

Safari=4.0.4

Safari=4.0.5

Safari=4.1

Safari=4.1.1

Safari=4.1.2

Safari=5.0

Safari=5.0.1

Safari=5.0.2

Safari=5.0.4

Safari=5.0.5

Safari=5.0.6

Safari=5.1

Safari=5.1.1

Safari=5.1.2

Safari=5.1.3

Safari=5.1.4

Safari=5.1.5

Safari=5.1.6

Event History

Jul 25, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3655?

CVE-2012-3655 is considered a critical vulnerability as it can be exploited by remote attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2012-3655?

To fix CVE-2012-3655, upgrade Apple Safari to version 6.0 or later, as earlier versions are vulnerable.

Which versions of Safari are affected by CVE-2012-3655?