Mac OS X : Apple Safari < 5.0.2 / 4.1.2

high Nessus Plugin ID 49143

Language:

New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote host contains a web browser that is affected by several vulnerabilities.

Description

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.2 / 4.1.2. As such, it is potentially affected by several issues in the following component :

- WebKit

Solution

Upgrade to Apple Safari 5.0.2 / 4.1.2 or later.

See Also

http://support.apple.com/kb/HT4333

http://lists.apple.com/archives/security-announce/2010/Sep/msg00001.html

Plugin Details

Severity: High

ID: 49143

File Name: macosx_Safari5_0_2.nasl

Version: 1.15

Type: local

Agent: macosx

Published: 9/8/2010

Updated: 7/14/2018

Dependencies: macosx_Safari31.nasl

Risk Information

VPR

Risk Factor: Critical

Score: 9.7

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 8.1

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: E:H/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:apple:safari

Required KB Items: Host/local_checks_enabled, Host/uname, Host/MacOSX/Version, MacOSX/Safari/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/7/2010

Vulnerability Publication Date: 9/7/2010

Exploitable With

CANVAS (CANVAS)

Core Impact

Reference Information

CVE: CVE-2010-1807, CVE-2010-1806

BID: 43047, 43049