Vulnerability Report

CVE-2011-1774

RCE

Title: Apple Webkit RCE

RCE

Proof Of Concept

PoC Available for CVE-2011-1774

CWE Category CWE-20
Published Date Jul 21, 2011
Modified Date Jun 16, 2026
Exploit Status Available
Score 8.8 CVSS v2.0
Exploit Probability (EPSS)
43.20%

Vulnerability Summary

CVE-2011-1774: WebKit in Apple Safari before 5.0.6 has improper libxslt security settings, which allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted web site. NOTE: this may overlap CVE-2011-1425.

Impacted Vendors

A
apple 2
W
webkit 1

Reference Links

http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html http://securityreason.com/securityalert/8481 http://support.apple.com/kb/HT4808 http://support.apple.com/kb/HT4981 http://support.apple.com/kb/HT4999 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html http://securityreason.com/securityalert/8481 http://support.apple.com/kb/HT4808 http://support.apple.com/kb/HT4981 http://support.apple.com/kb/HT4999
CVSS v2.0
Source Entity [email protected]
Severity HIGH
8.8
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:M/Au:N/C:N/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2011-1774 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/17993
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:M/Au:N/C:N/I:C/A:C

Affected Stack

No specific products linked.