QwikSec

Security Database

CVE

CWE

Training

CVE-2011-3246

Published: Oct 14, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://support.apple.com/kb/HT5130

x_refsource_CONFIRM

APPLE-SA-2011-10-12-1

vendor-advisory

x_refsource_APPLE

APPLE-SA-2012-02-01-1

vendor-advisory

x_refsource_APPLE

APPLE-SA-2011-11-10-1

vendor-advisory

x_refsource_APPLE

APPLE-SA-2011-10-12-3

vendor-advisory

x_refsource_APPLE

http://support.apple.com/kb/HT5052

x_refsource_CONFIRM

http://support.apple.com/kb/HT4999

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

appleios-http-sec-bypass(70551)

vdb-entry

x_refsource_XF

http://support.apple.com/kb/HT5002

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.