Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2011-0161

EPSS 0.39% · P60
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-0161

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted web site.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple Safari和iOS WebKit同源策略绕过和CSS令牌序列注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WebKit是KDE、苹果(Apple)、谷歌(Google)等公司共同开发的一套开源Web浏览器引擎,目前被Apple Safari及Google Chrome等浏览器使用。 Apple Safari 5.0.4之前版本和iOS 4.3之前版本中的WebKit没有正确处理Attr.style访问器。远程攻击者可以借助特制weg站点,绕过同源策略并注入层叠样式表令牌序列。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-0161

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-0161

Please Login to view more intelligence information

Same Patch Batch · n/a · 2011-03-11 · 42 CVEs total

CVE-2011-0158Apple iOS MobileSafari拒绝服务漏洞
CVE-2011-1286Google Chrome V8无效内存访问漏洞
CVE-2011-1413Google Chrome拒绝服务漏洞
CVE-2010-3609VMware多个产品SLPD OpenSLP拒绝服务漏洞
CVE-2011-0456OTRS webscript.pl命令注入漏洞
CVE-2011-1137ProFTPD mod_sftp模块整数溢出漏洞
CVE-2011-1416Research In Motion BlackBerry Torch内存内容读取漏洞
CVE-2011-1417Apple iOS MobileSafari OfficeArtBlip解析整数溢出漏洞
CVE-2011-1290WebKit 数字错误漏洞
CVE-2010-4651GNU patch util.c目录遍历漏洞
CVE-2011-0157Apple iOS WebKit任意代码执行漏洞
CVE-2011-1285Google Chrome正则表达式功能缓冲区错误漏洞
CVE-2011-0159Apple iOS Safari Settings功能用户追踪漏洞
CVE-2011-0160Apple Safari和iOS WebKit信息泄露漏洞
CVE-2011-0162Apple iOS和TV Wi-Fi拒绝服务漏洞
CVE-2011-0163Apple Safari和iOS WebKit拒绝服务漏洞
CVE-2011-0166Apple Safari WebKit HTML5拖放功能同源策略绕过和敏感信息泄露漏洞
CVE-2011-0167Apple Safari WebKit windows功能同源策略绕过和任意本地文件上传漏洞
CVE-2011-0169Apple Safari WebKit同源策略绕过和跨站脚本攻击漏洞
CVE-2011-0715Apache HTTP服务器'mod_dav_svn'模块空指针引用漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2011-0161

No comments yet


Leave a comment