CVE-2013-0974: Medium severity apple iPhone OS vulnerability
Published Jan 29, 2013
·Updated
StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.
Affected Software
3 affected components
apple iPhone OS<=6.0.2
apple iPhone OS=6.0
apple iPhone OS=6.0.1
Event History
Jan 29, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0974?
CVE-2013-0974 is classified as a medium severity vulnerability.
2
How do I fix CVE-2013-0974?
To fix CVE-2013-0974, users should update their iOS device to version 6.1 or later.
3
What versions of iOS are affected by CVE-2013-0974?
CVE-2013-0974 affects Apple iOS versions prior to 6.1, including 6.0.1 and 6.0.2.
4
What type of attack does CVE-2013-0974 facilitate?
CVE-2013-0974 allows remote attackers to execute JavaScript code on the device via a website with a Smart App Banner.
5
Is the vulnerability CVE-2013-0974 specific to any device?
CVE-2013-0974 is specifically related to Apple mobile devices running affected versions of iOS.