Mac OS X : Safari < 6.0.5 Multiple Security Vulnerabilities

medium Log Correlation Engine Plugin ID 801014


The remote host contains a web browser that is affected by multiple security vulnerabilities.


The remote Mac OS X host has Safari installed.

Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities:

- Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)

- Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-1009, CVE-2013-1023)


Upgrade to Safari 6.0.5 or later.

See Also

Plugin Details

Severity: Medium

ID: 801014

Family: Web Clients

Published: 6/5/2013

Risk Information


Risk Factor: Medium

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Information

Patch Publication Date: 6/5/2013

Vulnerability Publication Date: 6/5/2013

Reference Information

CVE: CVE-2013-1009, CVE-2013-1012, CVE-2013-1013, CVE-2013-1023

BID: 60330