Security Advisory

CVE-2012-3714

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-20 21:00:00

Last updated 2024-08-06 20:13:51

Assigner apple

CVSS score not scored

State PUBLISHED

Description

The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site.

← Browse all CVEs View on cve.org ↗