WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.

The remote host has Safari installed. 

Versions of Safari earlier than 5.1.7 are reportedly affected by several issues :

  - Two unspecified errors that can allow malicious sites to perform cross-site scripting attacks. (CVE-2011-3046, CVE-2011-3056)

  - An unspecified memory corruption error exists that can allows malicious sites to crash the application or potentially execute arbitrary code. (CVE-2012-0672)

  - A state-tracking issue exists that can allow malicious sites to populate HTML form values of other sites with arbitrary data. (CVE-2012-0676)


The version of Safari installed on the remote host reportedly is affected by several issues :

  - Two unspecified errors exist that can allow malicious     sites to perform cross-site scripting attacks.
    (CVE-2011-3046, CVE-2011-3056)

  - An unspecified memory corruption error exists that can     allow malicious sites to crash the application or     potentially execute arbitrary code. (CVE-2012-0672)

  - A state-tracking issue exists that can allow malicious     sites to populate HTML form values of other sites with     arbitrary data. (CVE-2012-0676)

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.1.7.  It is, therefore, potentially affected by several issues :

   - Two unspecified errors exist that can allow malicious     sites to perform cross-site scripting attacks.
    (CVE-2011-3046, CVE-2011-3056)

  - An unspecified memory corruption error exists that can     allow malicious sites to crash the application or     potentially execute arbitrary code. (CVE-2012-0672)

  - A state-tracking issue exists that can allow malicious     sites to populate HTML form values of other sites with     arbitrary data. (CVE-2012-0676)

ID	Name	Product	Family	Type	Severity
6483	Safari < 5.1.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		high
59069	Safari < 5.1.7 Multiple Vulnerabilities	Nessus	Windows	Local	high
59068	Mac OS X : Apple Safari < 5.1.7 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2012-0676

medium

Tenable Plugins

high

high

high