CVE-2012-3686: Buffer Overflow

Q: What is the severity of CVE-2012-3686?

CVE-2012-3686 is considered a high severity vulnerability as it allows remote code execution and could lead to a denial of service in affected versions of Apple Safari.

Q: How do I fix CVE-2012-3686?

To fix CVE-2012-3686, users should update Apple Safari to version 6.0 or later, which includes patches to address this vulnerability.

Q: What versions of Apple Safari are affected by CVE-2012-3686?

CVE-2012-3686 affects Apple Safari versions prior to 6.0, including all versions up to and including 5.1.7.

Q: Can CVE-2012-3686 lead to data loss?

Yes, CVE-2012-3686 can potentially lead to data loss by allowing attackers to execute arbitrary code that may compromise system integrity.

Q: Is a workaround available for CVE-2012-3686?

No specific workaround is available for CVE-2012-3686; updating Safari to the latest version is the recommended mitigation.

Published Jul 25, 2012

Updated

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.

Affected Software

102 affected components

Safari<=5.1.7

Safari=1.0

Safari=1.0-beta

Safari=1.0-beta2

Safari=1.0.0

Safari=1.0.0b1

Safari=1.0.0b2

Safari=1.0.1

Safari=1.0.2

Safari=1.0.3

Safari=1.0.3-85.8

Safari=1.0.3-85.8.1

Safari=1.0b1

Safari=1.1

Safari=1.1.0

Safari=1.1.1

Safari=1.2

Safari=1.2.0

Safari=1.2.1

Safari=1.2.2

Safari=1.2.3

Safari=1.2.4

Safari=1.2.5

Safari=1.3

Safari=1.3.0

Safari=1.3.1

Safari=1.3.2

Safari=1.3.2-312.5

Safari=1.3.2-312.6

Safari=2

Safari=2.0

Safari=2.0.0

Safari=2.0.1

Safari=2.0.2

Safari=2.0.3

Safari=2.0.3-417.8

Safari=2.0.3-417.9

Safari=2.0.3-417.9.2

Safari=2.0.3-417.9.3

Safari=2.0.4

Safari=3

Safari=3.0

Safari=3.0.0

Safari=3.0.0b

Safari=3.0.1

Safari=3.0.1-beta

Safari=3.0.1b

Safari=3.0.2

Safari=3.0.2b

Safari=3.0.3

Safari=3.0.3b

Safari=3.0.4

Safari=3.0.4b

Safari=3.1.0

Safari=3.1.0b

Safari=3.1.1

Safari=3.1.1b

Safari=3.1.2

Safari=3.1.2b

Safari=3.2.0

Safari=3.2.0b

Safari=3.2.1

Safari=3.2.1b

Safari=3.2.2

Safari=3.2.2b

Safari=4.0

Safari=4.0-beta

Safari=4.0.0b

Safari=4.0.1

Safari=4.0.2

Safari=4.0.3

Safari=4.0.4

Safari=4.0.5

Safari=4.1

Safari=4.1.1

Safari=4.1.2

Safari=5.0

Safari=5.0.1

Safari=5.0.2

Safari=5.0.4

Safari=5.0.5

Safari=5.0.6

Safari=5.1

Safari=5.1.1

Safari=5.1.2

Safari=5.1.3

Safari=5.1.4

Safari=5.1.5

Safari=5.1.6

Event History

Jul 25, 2012

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3686?

CVE-2012-3686 is considered a high severity vulnerability as it allows remote code execution and could lead to a denial of service in affected versions of Apple Safari.

How do I fix CVE-2012-3686?

To fix CVE-2012-3686, users should update Apple Safari to version 6.0 or later, which includes patches to address this vulnerability.

What versions of Apple Safari are affected by CVE-2012-3686?