01 Record

CVE-2011-1774

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site.

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site.

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 43.19% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 98.6% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2011-07-21 23:00Z15 YR AGO

Last updated

2024-08-06 22:37Z2 YR AGO

Reserved

2011-04-19

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-20Improper Input ValidationClass

Data version

5.1

Document digest

65b86b70e45c54701f5b2deaa69ecc3408c4136b11c031abfdd7dcff4b4216f3

05 Affected products

VendorProductVersionsPlatforms

applemac_os_xNot specified—

applemac_os_x_serverNot specified—

applesafariNot specified—

applewebkitNot specified—

microsoftwindows_7Not specified—

microsoftwindows_vistaNot specified—

microsoftwindows_xpNot specified—

06 References

securityreason.com8481http://securityreason.com/securityalert/8481third-party-advisoryx_refsource_SREASON
support.apple.comhttp://support.apple.com/kb/HT4981x_refsource_CONFIRM
lists.apple.comAPPLE-SA-2011-10-12-1http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.htmlvendor-advisoryx_refsource_APPLE
lists.apple.comAPPLE-SA-2011-10-11-1http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.htmlvendor-advisoryx_refsource_APPLE
support.apple.comhttp://support.apple.com/kb/HT4999x_refsource_CONFIRM
support.apple.comhttp://support.apple.com/kb/HT4808x_refsource_CONFIRM
lists.apple.comAPPLE-SA-2011-07-20-1http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.htmlvendor-advisoryx_refsource_APPLE