Apple Safari CVE-2012-3714 Form Autofill Information Disclosure Vulnerability
BID:55625
Info
Apple Safari CVE-2012-3714 Form Autofill Information Disclosure Vulnerability
| Bugtraq ID: | 55625 |
| Class: | Unknown |
| CVE: |
CVE-2012-3714 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 19 2012 12:00AM |
| Updated: | Sep 19 2012 12:00AM |
| Credit: | Jonathan Hogervorst of Buzzera |
| Vulnerable: |
Apple Safari 5.0.6 Apple Safari 6.0 Apple Safari 5.1.7 Apple Safari 5.1.4 Apple Safari 5.1.1 Apple Safari 5.1 Apple Safari 5.0.5 Apple Safari 5.0.4 Apple Safari 5.0.3 Apple Safari 5.0.2 Apple Safari 5.0.1 Apple Safari 5.0 |
| Not Vulnerable: |
Apple Safari 6.0.1 |
Discussion
Apple Safari CVE-2012-3714 Form Autofill Information Disclosure Vulnerability
Apple Safari is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information that may lead to further attacks.
Apple Safari versions prior to 6.0.1 are vulnerable.
Apple Safari is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information that may lead to further attacks.
Apple Safari versions prior to 6.0.1 are vulnerable.
Exploit / POC
Apple Safari CVE-2012-3714 Form Autofill Information Disclosure Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted site.
An attacker can exploit this issue by enticing an unsuspecting user to visit a crafted site.
Solution / Fix
Apple Safari CVE-2012-3714 Form Autofill Information Disclosure Vulnerability
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
Apple Safari CVE-2012-3714 Form Autofill Information Disclosure Vulnerability
References:
References:
- Safari Homepage (Apple)
- About the security content of Safari 6.0.1 (Apple)