CVE-2011-4692

WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://lcamtuf.coredump.cx/cachetime/	Exploit
http://oxplot.github.com/visipisi/visipisi.html	Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098
http://lcamtuf.coredump.cx/cachetime/	Exploit
http://oxplot.github.com/visipisi/visipisi.html	Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:a:apple:webkit::::::::

Configuration 2 (hide)

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:32

Type	Values Removed	Values Added
References	~~() http://lcamtuf.coredump.cx/cachetime/ - Exploit~~	() http://lcamtuf.coredump.cx/cachetime/ - Exploit
References	~~() http://oxplot.github.com/visipisi/visipisi.html - Exploit~~	() http://oxplot.github.com/visipisi/visipisi.html - Exploit
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098 -

Information

Published : 2011-12-07 19:55

Updated : 2024-11-21 01:32

NVD link : CVE-2011-4692

Mitre link : CVE-2011-4692

CVE.ORG link : CVE-2011-4692

JSON object : View

Products Affected

apple

webkit
safari

google

chrome

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2011-4692", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-12-07T19:55:03.267", "references": [{"url": "http://lcamtuf.coredump.cx/cachetime/", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://oxplot.github.com/visipisi/visipisi.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098", "source": "cve@mitre.org"}, {"url": "http://lcamtuf.coredump.cx/cachetime/", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://oxplot.github.com/visipisi/visipisi.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14098", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi."}, {"lang": "es", "value": "WebKit, como se usa en Apple Safari v5.1.1 y anteriores, y Google Chrome v15 y anteriores, no impide la captura de datos sobre el tiempo necesario para cargar la imagen, lo que hace m\u00e1s f\u00e1cil para los atacantes remotos para determinar si una imagen existe en la cach\u00e9 del navegador a trav\u00e9s de c\u00f3digo JavaScript modificado, como lo demuestra visipisi."}], "lastModified": "2024-11-21T01:32:47.650", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C09E119-BABB-4E30-A48D-F9D60DAF2AB8", "versionEndIncluding": "5.1.1"}, {"criteria": "cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "461EFB63-7933-488C-BB4E-7C913364F5A9"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7BFCFDB-D4ED-4457-85E1-4151BC74B75A", "versionEndIncluding": "15"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}