CVE-2011-2805

MEDIUM 6.8CVE-2011-2805 · Published 03/08/2011 · updated 16/06/2026

In short

CVE-2011-2805 is a MEDIUM (CVSS 6.8) vulnerability affecting safari (apple), chrome (google).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.3% of all vulnerabilities.
Fix: update to 5.1.1, 13.0.782.107 or later.

Package	Affected versions	Patched versions
safari apple	`< 5.1.1`	`5.1.1`
chrome google	`< 13.0.782.107`	`13.0.782.107`

Description

Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors.

References

code.google.com/p/chromium/issues/detail
googlechromereleases.blogspot.com/2011/08/stable-channel-update.html
lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html
lists.apple.com/archives/Security-announce/2011//Oct/msg00004.html
osvdb.org/74257
support.apple.com/kb/HT4999
support.apple.com/kb/HT5000
exchange.xforce.ibmcloud.com/vulnerabilities/68967
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14583

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free