CVE-2013-5125

WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.

• CWE-119

• http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlVendor Advisory
• http://secunia.com/advisories/54886Vendor Advisory
• http://support.apple.com/kb/HT5934Vendor Advisory
• http://support.apple.com/kb/HT6001
• http://www.securitytracker.com/id/1029054
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
• http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
• http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.htmlVendor Advisory
• http://secunia.com/advisories/54886Vendor Advisory
• http://support.apple.com/kb/HT5934Vendor Advisory
• http://support.apple.com/kb/HT6001
• http://www.securitytracker.com/id/1029054

Published

Sep 19, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5118Cross-site scripting (XSS) vulnerability in the Good for Ent…
• CVE-2013-5119Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows m…
• CVE-2013-5120SQL injection vulnerability in PHPFox before 3.6.0 (build4) …
• CVE-2013-5121SQL injection vulnerability in PHPFox before 3.6.0 (build6) …
• CVE-2013-5122Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug c…9.8
• CVE-2013-5123The mirroring support (-M, --use-mirrors) in Python Pip befo…5.9
• CVE-2013-5126WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5127WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5128WebKit, as used in Apple iOS before 7, allows remote attacke…
• CVE-2013-5129Multiple cross-site scripting (XSS) vulnerabilities in WebKi…
• CVE-2013-5130WebKit in Apple Safari before 6.1 disables the Private Brows…
• CVE-2013-5131Cross-site scripting (XSS) vulnerability in WebKit in Apple …