CVE-2012-3748

Description

Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays.

References

http://archives.neohapsis.com/archives/bugtraq/2012-11/0012.html

http://archives.neohapsis.com/archives/bugtraq/2012-11/0013.html

http://lists.apple.com/archives/security-announce/2012/Nov/msg00000.html

http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html

http://lists.apple.com/archives/security-announce/2013/Sep/msg00003.html

http://secunia.com/advisories/51445

http://support.apple.com/kb/HT5567

http://support.apple.com/kb/HT5568

http://support.apple.com/kb/HT5598

http://support.apple.com/kb/HT5921

http://www.securityfocus.com/bid/56362

Details

Risk Information

CVSS v2