Unscored CVE-2011-3229 EUVD-2011-3193GHSA-gghq-9c8v-j5pc

Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Ex…

Published Oct 14, 2011 · Updated Aug 6, 2024 · Assigned by apple

Description

Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL.

References

APPLE-SA-2011-10-12-4 vendor-advisory
safari-safari-extension-code-exec(70566) vdb-entry
76388 vdb-entry
http://support.apple.com/kb/HT5000