CVE-2012-3656: Buffer Overflow

Q: What is the severity of CVE-2012-3656?

CVE-2012-3656 has a severity that can allow remote code execution and denial of service due to memory corruption in affected versions of Apple Safari.

Q: How do I fix CVE-2012-3656?

To fix CVE-2012-3656, update Apple Safari to version 6.0 or later.

Q: Which versions of Safari are affected by CVE-2012-3656?

CVE-2012-3656 affects all versions of Apple Safari prior to 6.0.

Q: Can CVE-2012-3656 cause data loss?

Yes, CVE-2012-3656 has the potential to lead to data loss through a denial of service or remote code execution exploit.

Q: Is CVE-2012-3656 specific to Mac versions of Safari?

No, CVE-2012-3656 affects multiple versions of Apple Safari across different platforms.

Published Jul 25, 2012

Updated

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.

Affected Software

102 affected components

Safari<=5.1.7

Safari=1.0

Safari=1.0-beta

Safari=1.0-beta2

Safari=1.0.0

Safari=1.0.0b1

Safari=1.0.0b2

Safari=1.0.1

Safari=1.0.2

Safari=1.0.3

Safari=1.0.3-85.8

Safari=1.0.3-85.8.1

Safari=1.0b1

Safari=1.1

Safari=1.1.0

Safari=1.1.1

Safari=1.2

Safari=1.2.0

Safari=1.2.1

Safari=1.2.2

Safari=1.2.3

Safari=1.2.4

Safari=1.2.5

Safari=1.3

Safari=1.3.0

Safari=1.3.1

Safari=1.3.2

Safari=1.3.2-312.5

Safari=1.3.2-312.6

Safari=2

Safari=2.0

Safari=2.0.0

Safari=2.0.1

Safari=2.0.2

Safari=2.0.3

Safari=2.0.3-417.8

Safari=2.0.3-417.9

Safari=2.0.3-417.9.2

Safari=2.0.3-417.9.3

Safari=2.0.4

Safari=3

Safari=3.0

Safari=3.0.0

Safari=3.0.0b

Safari=3.0.1

Safari=3.0.1-beta

Safari=3.0.1b

Safari=3.0.2

Safari=3.0.2b

Safari=3.0.3

Safari=3.0.3b

Safari=3.0.4

Safari=3.0.4b

Safari=3.1.0

Safari=3.1.0b

Safari=3.1.1

Safari=3.1.1b

Safari=3.1.2

Safari=3.1.2b

Safari=3.2.0

Safari=3.2.0b

Safari=3.2.1

Safari=3.2.1b

Safari=3.2.2

Safari=3.2.2b

Safari=4.0

Safari=4.0-beta

Safari=4.0.0b

Safari=4.0.1

Safari=4.0.2

Safari=4.0.3

Safari=4.0.4

Safari=4.0.5

Safari=4.1

Safari=4.1.1

Safari=4.1.2

Safari=5.0

Safari=5.0.1

Safari=5.0.2

Safari=5.0.4

Safari=5.0.5

Safari=5.0.6

Safari=5.1

Safari=5.1.1

Safari=5.1.2

Safari=5.1.3

Safari=5.1.4

Safari=5.1.5

Safari=5.1.6

Event History

Jul 25, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3656?

CVE-2012-3656 has a severity that can allow remote code execution and denial of service due to memory corruption in affected versions of Apple Safari.

How do I fix CVE-2012-3656?

To fix CVE-2012-3656, update Apple Safari to version 6.0 or later.

Which versions of Safari are affected by CVE-2012-3656?