Unscored CVE-2011-3231 EUVD-2011-3195GHSA-5x4w-6r2x-m2rf

The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 ce…

Published Oct 14, 2011 · Updated Aug 6, 2024 · Assigned by apple

Description

The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate.

References

APPLE-SA-2011-10-12-4 vendor-advisory
http://support.apple.com/kb/HT5000
76390 vdb-entry
apple-safari-ssl-code-exec(70568) vdb-entry