Mac OS X : Apple Safari < 5.1.10 Memory Corruptions

medium Nessus Plugin ID 69879

Language:

Synopsis

The remote host contains a web browser that is affected by two memory corruption vulnerabilities.

Description

The version of Apple Safari installed on the remote Mac OS X 10.6 host is earlier than 5.1.10. It is, therefore, potentially affected by two memory corruption vulnerabilities in JavaScriptCore's JSArray::sort() method. By tricking a user into visiting a malicious website, an attacker could leverage these issues to cause an application crash or to execute arbitrary code.

Solution

Upgrade to Apple Safari 5.1.10 or later.

Plugin Details

Severity: Medium

ID: 69879

File Name: macosx_Safari5_1_10.nasl

Version: 1.9

Type: local

Agent: macosx

Family: MacOS X Local Security Checks

Published: 9/13/2013

Updated: 7/16/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:apple:safari

Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version, MacOSX/Safari/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/12/2013

Vulnerability Publication Date: 11/1/2012

Reference Information

CVE: CVE-2012-3748, CVE-2013-0997

BID: 56362, 59958

APPLE-SA: APPLE-SA-2013-09-12-2

Detections

Analytics