Mac OS X : Safari < 6.0.5 Multiple Security Vulnerabilities

medium Log Correlation Engine Plugin ID 801014

Synopsis

The remote host contains a web browser that is affected by multiple security vulnerabilities.

Description

The remote Mac OS X host has Safari installed.

Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities:

- Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)

- Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-1009, CVE-2013-1023)

Solution

Upgrade to Safari 6.0.5 or later.

See Also

support.apple.com/kb/HT5785

http://.apple.com/safari

Plugin Details

Severity: Medium

ID: 801014

Family: Web Clients

Published: 6/5/2013

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

Patch Publication Date: 6/5/2013

Vulnerability Publication Date: 6/5/2013

Reference Information

CVE: CVE-2013-1009, CVE-2013-1012, CVE-2013-1013, CVE-2013-1023

BID: 60330