APPLE-SA-2009-08-11-1

http://support.apple.com/kb/HT3733

36022

1022718

The version of Safari installed on the remote host is earlier than 4.0.3.  Such versions are potentially affected by several issues : 

  - A buffer overflow exists in the handling of EXIF metadata could lead to a crash or arbitrary code execution. (CVE-2009-2188)

  - A vulnerability in WebKit's parsing of floating point numbers may allow for remote code execution. (CVE-2009-2195)

  - A vulnerability in Safari may let a malicious website to be promoted in Safari's Top Sites. (CVE-2009-2196)

  - A vulnerability in how WebKit renders an URL with look alike characters could be used to masquerade a website. (CVE-2009-2199)

  - A vulnerability in WebKit may lead to the disclosure of sensitive information. (CVE-2009-2200)

  - A heap buffer overflow in CoreGraphics involving the drawing of long text strings could lead to a crash or arbitrary code execution. (CVE-2009-2468)

The version of Safari installed on the remote Windows host is earlier than 4.0.3.  Such versions are potentially affected by several issues :

  - A buffer overflow exists in the handling of EXIF     metadata that ccould lead to a crash or arbitrary code     execution. (CVE-2009-2188)

  - A vulnerability in WebKit's parsing of floating point     numbers may allow for remote code execution.
    (CVE-2009-2195)

  - A vulnerability in Safari may allow a malicious website     to be promoted in Safari's Top Sites. (CVE-2009-2196)

  - A vulnerability in how WebKit renders an URL with look-     alike characters could be used to masquerade a website.
    (CVE-2009-2199)

  - A vulnerability in WebKit may lead to the disclosure of     sensitive information. (CVE-2009-2200)

  - A heap-based buffer overflow in CoreGraphics involving     the drawing of long text strings could lead to a crash     or arbitrary code execution. (CVE-2009-2468)

The version of Apple Safari installed on the remote Mac OS X host is earlier than 4.0.3.  As such, it is potentially affected by several issues :

  - A vulnerability in WebKit's parsing of floating point     numbers may allow for remote code execution.
    (CVE-2009-2195)

  - A vulnerability in Safari may allow a malicious website to     be promoted in Safari's Top Sites. (CVE-2009-2196)

  - A vulnerability in how WebKit renders a URL with look-     alike characters could be used to masquerade a website.
    (CVE-2009-2199)

  - A vulnerability in WebKit may lead to the disclosure of     sensitive information. (CVE-2009-2200)

ID	Name	Product	Family	Severity
801007	Safari < 4.0.3 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5125	Safari < 4.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
40554	Safari < 4.0.3 Multiple Vulnerabilities	Nessus	Windows	high
40553	Mac OS X : Apple Safari < 4.0.3	Nessus	MacOS X Local Security Checks	high

CVE-2009-2196

medium

Tenable Plugins

high

medium

high

high