CVE-2012-0676
Summary
| CVE | CVE-2012-0676 |
|---|---|
| State | PUBLISHED |
| Assigner | apple |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-05-11 03:49:59 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:L/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apple | Safari | 1.0 | All | All | All |
| Application | Apple | Safari | 1.0 | beta | All | All |
| Application | Apple | Safari | 1.0 | beta2 | All | All |
| Application | Apple | Safari | 1.0.0 | All | All | All |
| Application | Apple | Safari | 1.0.0b1 | All | All | All |
| Application | Apple | Safari | 1.0.0b2 | All | All | All |
| Application | Apple | Safari | 1.0.1 | All | All | All |
| Application | Apple | Safari | 1.0.2 | All | All | All |
| Application | Apple | Safari | 1.0.3 | All | All | All |
| Application | Apple | Safari | 1.0.3 | 85.8 | All | All |
| Application | Apple | Safari | 1.0.3 | 85.8.1 | All | All |
| Application | Apple | Safari | 1.0b1 | - | mac | All |
| Application | Apple | Safari | 1.1 | All | All | All |
| Application | Apple | Safari | 1.1.0 | All | All | All |
| Application | Apple | Safari | 1.1.1 | All | All | All |
| Application | Apple | Safari | 1.2 | All | All | All |
| Application | Apple | Safari | 1.2.0 | All | All | All |
| Application | Apple | Safari | 1.2.1 | All | All | All |
| Application | Apple | Safari | 1.2.2 | All | All | All |
| Application | Apple | Safari | 1.2.3 | All | All | All |
| Application | Apple | Safari | 1.2.4 | All | All | All |
| Application | Apple | Safari | 1.2.5 | All | All | All |
| Application | Apple | Safari | 1.3 | All | All | All |
| Application | Apple | Safari | 1.3.0 | All | All | All |
| Application | Apple | Safari | 1.3.1 | All | All | All |
| Application | Apple | Safari | 1.3.2 | All | All | All |
| Application | Apple | Safari | 1.3.2 | 312.5 | All | All |
| Application | Apple | Safari | 1.3.2 | 312.6 | All | All |
| Application | Apple | Safari | 2 | All | All | All |
| Application | Apple | Safari | 2.0 | All | All | All |
| Application | Apple | Safari | 2.0.0 | All | All | All |
| Application | Apple | Safari | 2.0.1 | All | All | All |
| Application | Apple | Safari | 2.0.2 | All | All | All |
| Application | Apple | Safari | 2.0.3 | All | All | All |
| Application | Apple | Safari | 2.0.3 | 417.8 | All | All |
| Application | Apple | Safari | 2.0.3 | 417.9 | All | All |
| Application | Apple | Safari | 2.0.3 | 417.9.2 | All | All |
| Application | Apple | Safari | 2.0.3 | 417.9.3 | All | All |
| Application | Apple | Safari | 2.0.4 | All | All | All |
| Application | Apple | Safari | 2.0.4 | - | mac | All |
| Application | Apple | Safari | 3 | All | All | All |
| Application | Apple | Safari | 3.0 | All | All | All |
| Application | Apple | Safari | 3.0.0 | All | All | All |
| Application | Apple | Safari | 3.0.0 | - | mac | All |
| Application | Apple | Safari | 3.0.0b | All | All | All |
| Application | Apple | Safari | 3.0.0b | - | windows | All |
| Application | Apple | Safari | 3.0.1 | All | All | All |
| Application | Apple | Safari | 3.0.1 | - | mac | All |
| Application | Apple | Safari | 3.0.1 | beta | All | All |
| Application | Apple | Safari | 3.0.1b | All | All | All |
| Application | Apple | Safari | 3.0.1b | - | windows | All |
| Application | Apple | Safari | 3.0.2 | All | All | All |
| Application | Apple | Safari | 3.0.2 | - | mac | All |
| Application | Apple | Safari | 3.0.2b | All | All | All |
| Application | Apple | Safari | 3.0.2b | - | windows | All |
| Application | Apple | Safari | 3.0.3 | All | All | All |
| Application | Apple | Safari | 3.0.3 | - | mac | All |
| Application | Apple | Safari | 3.0.3b | All | All | All |
| Application | Apple | Safari | 3.0.3b | - | windows | All |
| Application | Apple | Safari | 3.0.4 | All | All | All |
| Application | Apple | Safari | 3.0.4 | - | mac | All |
| Application | Apple | Safari | 3.0.4b | All | All | All |
| Application | Apple | Safari | 3.0.4b | - | windows | All |
| Application | Apple | Safari | 3.1.0 | All | All | All |
| Application | Apple | Safari | 3.1.0 | - | mac | All |
| Application | Apple | Safari | 3.1.0b | All | All | All |
| Application | Apple | Safari | 3.1.0b | - | windows | All |
| Application | Apple | Safari | 3.1.1 | All | All | All |
| Application | Apple | Safari | 3.1.1b | - | windows | All |
| Application | Apple | Safari | 3.1.2 | All | All | All |
| Application | Apple | Safari | 3.1.2b | - | windows | All |
| Application | Apple | Safari | 3.2.0 | All | All | All |
| Application | Apple | Safari | 3.2.0b | - | windows | All |
| Application | Apple | Safari | 3.2.1 | All | All | All |
| Application | Apple | Safari | 3.2.1b | - | windows | All |
| Application | Apple | Safari | 3.2.2 | All | All | All |
| Application | Apple | Safari | 3.2.2b | - | windows | All |
| Application | Apple | Safari | 4.0 | All | All | All |
| Application | Apple | Safari | 4.0 | beta | All | All |
| Application | Apple | Safari | 4.0.0b | All | All | All |
| Application | Apple | Safari | 4.0.1 | All | All | All |
| Application | Apple | Safari | 4.0.2 | All | All | All |
| Application | Apple | Safari | 4.0.3 | All | All | All |
| Application | Apple | Safari | 4.0.4 | All | All | All |
| Application | Apple | Safari | 4.0.5 | All | All | All |
| Application | Apple | Safari | 4.1 | All | All | All |
| Application | Apple | Safari | 4.1.1 | All | All | All |
| Application | Apple | Safari | 4.1.2 | All | All | All |
| Application | Apple | Safari | 5.0 | All | All | All |
| Application | Apple | Safari | 5.0.1 | All | All | All |
| Application | Apple | Safari | 5.0.2 | All | All | All |
| Application | Apple | Safari | 5.0.4 | All | All | All |
| Application | Apple | Safari | 5.0.5 | All | All | All |
| Application | Apple | Safari | 5.0.6 | All | All | All |
| Application | Apple | Safari | 5.1 | All | All | All |
| Application | Apple | Safari | 5.1.1 | All | All | All |
| Application | Apple | Safari | 5.1.2 | All | All | All |
| Application | Apple | Safari | 5.1.3 | All | All | All |
| Application | Apple | Safari | 5.1.4 | All | All | All |
| Application | Apple | Safari | 5.1.5 | All | All | All |
| Application | Apple | Safari | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About the security content of Safari 5.1.7 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Vendor Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Apple Safari WebKit Flaw Lets Remote Users Fill Out Form Inputs on a Target Web Page for a Target User - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| APPLE-SA-2012-05-09-2 Safari 5.1.7 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Vendor Advisory |
| About Secunia Research | Flexera | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| osvdb.org/81787 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.