deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3695
Published: 2012-07-25
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary web script or HTML by leveraging improper URL canonicalization during the handling of the location.href property.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://support.apple.com/kb/HT5400
CVE: CVE-2012-3696
Published: 2012-07-25
Description: CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP request splitting attacks via a crafted web site that leverages improper WebSockets URI handling.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html; http://support.apple.com/kb/HT5400
CVE: CVE-2012-3697
Published: 2012-07-25
Description: WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended sandbox restrictions and read arbitrary files by leveraging a WebProcess compromise.
CVSS Score: 7.1 (HIGH)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://support.apple.com/kb/HT5400; http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
CVE: CVE-2012-4053
Published: 2012-07-25
Description: Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/83676; http://secunia.com/advisories/49812; http://share.ez.no/community-project/security-advisories/ezsa-2012-009-ezoe-flash-player-csrf-security-issues
CVE: CVE-2012-0682
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-0683
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-1520
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3589
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3590
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 8.8 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3591
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3592
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3593
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3594
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3595
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3596
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3597
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3599
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3600
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3603
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3604
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3605
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3608
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3609
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3610
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3611
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3615
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3618
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3620
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3625
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3626
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3627
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3628
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3629
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3630
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3631
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3633
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3634
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3635
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3636
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3637
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3638
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html
CVE: CVE-2012-3639
Published: 2012-07-25
Description: WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-07-25-1.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2012/Jul/msg00000.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.html