Unscored CVE-2012-3691 EUVD-2012-3638GHSA-7vr2-mwjm-89wv

WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to b…

Published Jul 25, 2012 · Updated Aug 6, 2024 · Assigned by apple

Description

WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

References

APPLE-SA-2012-09-19-1 vendor-advisory
http://support.apple.com/kb/HT5503
APPLE-SA-2012-07-25-1 vendor-advisory
http://support.apple.com/kb/HT5400