Unscored CVE-2011-0242 EUVD-2011-0268GHSA-pmf2-88mc-4h7q

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or H…

Published Jul 21, 2011 · Updated Aug 6, 2024 · Assigned by apple

Package: qtwebkit-source Ecosystem: Ubuntu

Description

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving a URL that contains a username.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	qtwebkit-source	No fix yet	—

References

APPLE-SA-2011-10-12-1 vendor-advisory
http://support.apple.com/kb/HT4999
http://support.apple.com/kb/HT4808
APPLE-SA-2011-07-20-1 vendor-advisory