CVE-2011-0216

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service…

High9.3EPSS 5.0%

Published: 21 Jul 2011
Updated: 6 Aug 2024
Reserved: 23 Dec 2010
Assigned by: apple

Description

Off-by-one error in libxml in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.

Scores

CVSS scores of CVE-2011-0216, by who scored it
Scored by	CVSS	Score	Vector
NVDNVD · Modified	2.0	High9.3	AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS (exploitation in 30 days): 5.0% · top 7.8% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

Affected products

n/a
- affected n/a

References (10)

APPLE-SA-2011-10-12-1 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
RHSA-2013:0217 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
RHSA-2011:1749 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
MDVSA-2011:188 (opens in a new tab)vendor-advisoryx_refsource_MANDRIVAx_transferred
http://support.apple.com/kb/HT4999 (opens in a new tab)x_refsource_CONFIRMx_transferred
http://support.apple.com/kb/HT5001 (opens in a new tab)x_refsource_CONFIRMx_transferred
http://support.apple.com/kb/HT4808 (opens in a new tab)x_refsource_CONFIRMx_transferred
APPLE-SA-2011-07-20-1 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
APPLE-SA-2011-10-12-2 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
DSA-2394 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2011-0216](https://trackcve.app/badge/CVE-2011-0216.svg)](https://trackcve.app/cve/CVE-2011-0216)

Record last updated 6 Aug 2024, 21:43 UTC.