WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a     denial of service (memory corruption and application crash) via a crafted web site, a different     vulnerability than CVE-2013-1023. (CVE-2013-1009)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host has Safari installed. Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities :

  - Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)
 - Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-0879, CVE-2013-0991, CVE-2013-0992, CVE-2013-0993, CVE-2013-0994, CVE-2013-0995, CVE-2013-0996, CVE-2013-0997, CVE-2013-0998, CVE-2013-0999, CVE-2013-1000, CVE-2013-1001, CVE-2013-1002, CVE-2013-1003, CVE-2013-1004, CVE-2013-1005, CVE-2013-1006, CVE-2013-1007, CVE-2013-1008, CVE-2013-1009, CVE-2013-1010, CVE-2013-1011, CVE-2013-1023)

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues :

  - Multiple memory corruption vulnerabilities exist in     WebKit that could lead to unexpected program termination     or arbitrary code execution. (CVE-2013-0879 /     CVE-2013-0991 / CVE-2013-0992 / CVE-2013-0993 /     CVE-2013-0994 / CVE-2013-0995 / CVE-2013-0996 /     CVE-2013-0997 / CVE-2013-0998 / CVE-2013-0999 /     CVE-2013-1000 / CVE-2013-1001 / CVE-2013-1002 /     CVE-2013-1003 / CVE-2013-1004 / CVE-2013-1005 /     CVE-2013-1006 / CVE-2013-1007 / CVE-2013-1008 /     CVE-2013-1009 / CVE-2013-1010 / CVE-2013-1011 /     CVE-2013-1023)

  - A cross-site scripting issue exists in WebKit's handling     of iframes. (CVE-2013-1012)

  - A cross-site scripting issue exists in WebKit's handling     of copied and pasted data in HTML documents.
    (CVE-2013-0926)

  - In rewriting URLs to prevent cross-site scripting     attacks, XSS Auditor could be abused, leading to     malicious alteration of the behavior of a form     submission. (CVE-2013-1013)

ID	Name	Product	Family	Type	Severity
264278	Linux Distros Unpatched Vulnerability : CVE-2013-1009	Nessus	Misc.	Local	high
6856	Safari < 6.0.5 Multiple Security Vulnerabilities	Nessus Network Monitor	Web Clients		medium
66810	Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2013-1009

high

Tenable Plugins

high

medium

high