CVE-2013-1012

Apple Safari < 6.0.5 - Cross-Site Scripting via IFRAME Elements

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.

References (5)

Core 5
Core References
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5785
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/54886
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5934
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2013/Jun/msg00001.html

Scores

EPSS 0.0177
EPSS Percentile 75.8%

Details

CWE
CWE-79
Status published
Products (5)
apple/safari 6.0
apple/safari 6.0.1
apple/safari 6.0.2
apple/safari 6.0.3
apple/safari < 6.0.4
Published Jun 05, 2013
Tracked Since Feb 18, 2026