CVE-2011-3230
Apple Safari - Remote Code Execution via File URL Policy Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-3230.
PoCs published by Metasploit, Aaron Sigel, sinn3r, including Metasploit module exploits/osx/browser/safari_file_policy.
AI-analyzed exploit summary This Metasploit module exploits a file:// URL policy vulnerability in Apple Safari 5.1 on macOS, allowing arbitrary code execution by serving a malicious payload via FTP and triggering its execution through a crafted HTML page. The exploit leverages the victim's browser to execute a payload from a remote share or local directory.
Description
Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.
Exploits (2)
This Metasploit module exploits a file:// URL policy vulnerability in Apple Safari 5.1 on macOS, allowing arbitrary code execution by serving a malicious payload via FTP and triggering its execution through a crafted HTML page. The exploit leverages the victim's browser to execute a payload from a remote share or local directory.
This Metasploit module exploits a policy issue in Apple Safari (CVE-2011-3230) to achieve arbitrary code execution via file:// URLs. It sets up an FTP and HTTP server to deliver a payload (either a .jar or .sh file) to the victim's machine, leveraging automount or directory traversal to execute the payload.