CVE-2011-0167 in Safari

Summary

The windows functionality in WebKit in Apple Safari before 5.0.4 allows remote attackers to bypass the Same Origin Policy, and force the upload of arbitrary local files from a client computer, via a crafted web site.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 12/23/2010
• Disclosure: 03/11/2011
• Moderation: VulDB entry created
• Entries: VDB-56822
• CPE: ready
• CWE: CWE-264 (Confirmed)
• Exploit: Download
• CVSS: 5.3
• EPSS: 0.02045
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0167
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0167
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0167/