CVE Vulnerabilities

CVE-2013-0974

Published: Jan 29, 2013 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io minimus.io echohq.com

StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.

Affected Software

Name Vendor Start Version End Version
Iphone_os Apple * 6.0.2 (including)
Iphone_os Apple 6.0 (including) 6.0 (including)
Iphone_os Apple 6.0.1 (including) 6.0.1 (including)

References