CVE-2012-3650

Apple Safari < 6.0 - Information Disclosure via SVG Image Rendering

Title source: llm
STIX 2.1

Description

WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

References (5)

Core 5
Core References
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5503
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/54703
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5400

Scores

EPSS 0.0092
EPSS Percentile 56.2%

Details

CWE
CWE-200
Status published
Products (35)
apple/safari 1.0 (3 CPE variants)
apple/safari 1.0.0
apple/safari 1.0.0b1
apple/safari 1.0.0b2
apple/safari 1.0.1
apple/safari 1.0.2
apple/safari 1.0.3 (3 CPE variants)
apple/safari 1.0b1
apple/safari 1.1
apple/safari 1.1.0
... and 25 more
Published Jul 25, 2012
Tracked Since Feb 18, 2026