Unscored CVE-2013-1012 EUVD-2013-1052GHSA-65p2-j4g9-gxhr

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or H…

Published Jun 5, 2013 · Updated Aug 6, 2024 · Assigned by apple

Package: qtwebkit-opensource-src Package: qtwebkit-source Ecosystem: Ubuntu

Description

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	qtwebkit-source +1	No fix yet	—

References

http://support.apple.com/kb/HT5785
54886 third-party-advisory
http://support.apple.com/kb/HT5934
APPLE-SA-2013-06-04-2 vendor-advisory
APPLE-SA-2013-09-18-2 vendor-advisory