CVE-2012-3670

WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…

published July 25, 2012

CVSS
—
EPSS
4%
Percentile
89.9
In the wild
Unconfirmed
What it is

⚠️ A crafty website can lead to complete chaos in older Safari versions! WebKit before 6.0 has a flaw that lets attackers execute arbitrary code straight from the browser. 😱 Think of it like a restaurant with an open kitchen where anyone can walk in and start cooking — if they know how to manipulate the menu, they could ruin the entire dining experience! An attacker could crash Safari or take control of your system, wreaking havoc and causing a denial of service. Imagine your browser crashing at the most critical moment — absolutely devastating!

Put simply

Think of it like a restaurant with an open kitchen where anyone can walk in and start cooking — if they know how to manipulate the menu, they could ruin the entire dining experience! This vulnerability arises from memory corruption in WebKit, allowing remote attackers to execute arbitrary code via a specially crafted website, diverging from other known WebKit issues.

What to do

An attacker could crash Safari or take control of your system, wreaking havoc and causing a denial of service. Imagine your browser crashing at the most critical moment — absolutely devastating! Upgrade to Safari version 6.0 or higher immediately to ensure you're protected from this vulnerability. Regularly apply updates to keep your browser secure and watch for any suspicious websites! You’ve got this! Follow these steps and you'll be surfing safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03811 · 89.9th percentile
Published
2012-07-25T20:00Z
EPSS history
Timeline
  • 25 JUL 20:00Z
    WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application…
    cvelistv5