CVE-2012-0585

iPhone OS < 5.1 - Privacy Bypass via Safari pushState/replaceState Methods

Title source: llm

Description

The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1026774

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/48377

Broken Link vdb-entry x_refsource_osvdb

http://osvdb.org/79964

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/73871

Mailing List, Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/48288

Mailing List, Vendor Advisory vendor-advisory x_refsource_apple

http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html

Scores

EPSS 0.0247

EPSS Percentile 82.8%

Details

CWE

CWE-264

Status published

Products (1)

apple/iphone_os < 5.1

Published Mar 08, 2012

Tracked Since Feb 18, 2026