CVEvulnerability
CVE-2012-0585
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-03-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The Private Browsing feature in Safari in Apple iOS before 5.1 allows remote attackers to bypass intended privacy settings and insert history entries via JavaScript code that calls the (1) pushState or (2) replaceState method.
Affected configurations
• apple iphone os (< 5.1)
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html Mailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html Mailing List, Vendor Advisory
- http://osvdb.org/79964 Broken Link
- http://secunia.com/advisories/48288 Third Party Advisory
- http://secunia.com/advisories/48377 Third Party Advisory
- http://www.securitytracker.com/id?1026774 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73871 Third Party Advisory, VDB Entry
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00001.html Mailing List, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2012/Mar/msg00003.html Mailing List, Vendor Advisory
- http://osvdb.org/79964 Broken Link
- http://secunia.com/advisories/48288 Third Party Advisory
- http://secunia.com/advisories/48377 Third Party Advisory
- http://www.securitytracker.com/id?1026774 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73871 Third Party Advisory, VDB Entry