CVE-2012-5851
Published Nov 15, 2012
Last updated 7 years ago
Overview
- Description
- html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting (XSS) protection mechanism via a crafted string, aka rdar problem 12019108.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-79
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "461EFB63-7933-488C-BB4E-7C913364F5A9"
},
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "741C8605-B70E-4006-B047-8B449B1DBED8",
"versionEndIncluding": "22.0.1229.96"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFA38088-0F0C-4AD7-B6AE-90E0A296CBC3"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EBC81E3-5BFB-4A72-AE61-824925EA566E"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F6D1B7C-68B2-4E15-A299-64AB33AC44A2"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1E74AD2-3C44-45F3-898A-9BCEB5EA9A50"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E2ADE22-3ED1-4ADE-B6B3-FD2660A9B2B0"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91896DBD-3DE2-40FC-B1D1-46C78335BEB4"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B34C33DD-782F-4496-B8EB-6A4E03ACC435"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2219708F-86BE-4B08-9CE4-3AA4CC6366E3"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C777D40-B33D-424C-99C2-4BB255782ADA"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB90F606-71C4-484A-9748-CD91290FCFCE"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "137AE4FA-8BA2-45F1-A679-F78B40A87B19"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1592A3E6-0B43-4DE0-8578-89281762FF9F"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B74803BF-7531-45DC-9A75-0BF2B564D93D"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "751A2447-B844-4AC0-9078-E608B4931853"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64C12DD1-E746-47A0-A153-C1A483C85CDC"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "051D486A-D5B5-40C1-AAA0-9E4436BDA50D"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCF8DFBC-0C20-4A45-85BA-E78392D9E871"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58C802FC-ADB1-4FBA-8B43-D1CD5DCB213D"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5713F8A-53EF-4907-8F26-E02C91136A0E"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A56C21F-F2F5-4E53-98F8-9EBD52FBBF5A"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "717B88A5-567A-498E-B559-E2EF1D0D8868"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FCD61E9-F183-44B3-900F-663C7F69DDB3"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D268EF5-2147-4A76-9E82-BD1284F751A2"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9437B1F1-5D6D-49A8-9BA1-BC2299727961"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "405AC015-C815-4D53-9430-37643534234A"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4234CB96-56D8-4D5E-88E2-E9CC048BDC76"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FAC7F56E-24F5-451A-AC82-FD1837B0B797"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2697F6EA-AECC-48E9-976F-A33EA43510DE"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EC008A4-B85F-43F9-AAE5-D55468280057"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A3198ED-BA23-4E6A-B043-07E75C262839"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "579EE812-100F-4E79-871D-583044D56102"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0B7E2C4-5A74-4E49-AC56-D718FC69B61C"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A14964C-F114-45AC-A30D-42E120E2AEF9"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.48:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3C2FBEC-17DE-4D09-8F2D-3642E90DA579"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.49:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E0DC0C5-6902-4A4A-A26C-B5F7DB7DE2DB"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.50:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C8518F5-67A2-478F-82F0-28202A73C594"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.51:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "537FBE4D-BCC4-4320-AEC6-8151842DC4DE"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.52:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0F5737D-56FA-49EB-8DA0-5EFA1405A03A"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.53:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0ABAA20-52A5-424D-A8DA-5333CFC5E417"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.54:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A042CA57-F72C-450D-B35F-2F057675C120"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.55:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD6155D0-D684-4598-A83B-FF2D1860D141"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.56:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3ADDB123-1157-4C87-8193-A1CF5BFE7C05"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.57:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2795BD2C-C512-4F00-8AD0-4781E665D515"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.58:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93A94863-EAD7-4B10-A674-0CFA9EA28618"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0D987B5-8F32-43FC-B753-87B2E29A2ECF"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7345E1B-B38F-4C7E-88B9-C905D919F291"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A591F092-4359-4F6E-BD07-C8554E72FA23"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A3D3FA2-C02E-4EA5-88C5-54311C126DC8"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.64:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DA9F5D3-AEBF-4E38-8C9B-C2503994CA16"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.65:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A848E89E-BEA9-49F9-A8D5-A19B0885E356"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84F974E8-8B1D-414B-85C4-21127917C4D9"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F0CF53F-0D12-4C7E-89CF-14EA6656F588"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.78:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7881D85C-A355-4DC6-BD63-60A4A1479776"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.79:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBFBF777-C634-4950-8088-6E778B3CEE47"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.89:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F3FEC13-2E91-4D49-A390-8458456EC17D"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.91:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "316FDBBC-B40A-4394-8A8F-F921CE773564"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.92:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2354EDB-3A71-40E2-B37E-E0EBDFDD99FD"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.94:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "517D8034-5E1C-4008-A254-21FF3488CC79"
},
{
"criteria": "cpe:2.3:a:google:chrome:22.0.1229.95:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B99AA29-7F92-48F3-B151-D45B45AAD7A0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apple:safari:5.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4A7330C-EA91-49E7-BE21-A73B9ED8D499"
},
{
"criteria": "cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "461EFB63-7933-488C-BB4E-7C913364F5A9"
}
],
"operator": "OR"
}
]
}
]