CVE-2012-0682

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…

published July 25, 2012

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

⚠️ A crafty website could exploit Safari versions before 6.0, allowing attackers to execute arbitrary code — like a magician pulling a rabbit out of a hat, but way less fun! 🐇 Think of it as a restaurant where a chef can serve any dish without checking the recipe — if the chef is reckless, it could lead to disastrous and unexpected meals. In this case, the crafted website is the chef, and the arbitrary code is the dish served without supervision. An attacker could crash the browser or even worse, gain control of the machine, leading to potential data theft or system compromise. Imagine your entire browsing session abruptly ending, leaving you vulnerable to whatever the attacker wants to do next!

Put simply

Think of it as a restaurant where a chef can serve any dish without checking the recipe — if the chef is reckless, it could lead to disastrous and unexpected meals. In this case, the crafted website is the chef, and the arbitrary code is the dish served without supervision. This vulnerability in WebKit allows remote attackers to cause memory corruption through specially crafted websites, leading to arbitrary code execution or denial of service.

What to do

An attacker could crash the browser or even worse, gain control of the machine, leading to potential data theft or system compromise. Imagine your entire browsing session abruptly ending, leaving you vulnerable to whatever the attacker wants to do next! Update Safari to version 6.0 or later to mitigate this issue. It’s important to regularly check for browser updates to stay safe from vulnerabilities like this one! You've got this! Stay vigilant, keep your browser updated, and you’ll keep the cyber baddies at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03729 · 89.7th percentile
Published
2012-07-25T20:00Z
EPSS history
Timeline
  • 25 JUL 20:00Z
    WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
    cvelistv5