What’s Vulnerable › Vulnerabilities

CVE-2012-3714

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-09-20 · updated 2026-06-16
• Weakness: CWE-200

Description

The Form Autofill feature in Apple Safari before 6.0.1 does not restrict the filled fields to the set of fields contained in an Autofill popover, which allows remote attackers to obtain the Me card from an Address Book via a crafted web site.

Affected products

• Apple Safari: through 6.0; 1.0, 1.0-beta, 1.0-beta2, 1.0.0, 1.0.0b1, 1.0.0b2 (+83)

References

• http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
• http://osvdb.org/85653
• http://support.apple.com/kb/HT5502
• http://www.securityfocus.com/bid/55625
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78681
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00005.html
• http://osvdb.org/85653
• http://support.apple.com/kb/HT5502
• http://www.securityfocus.com/bid/55625
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78681

Get alerted when CVE-2012-3714 or the next vulnerability affects your stack