Safari < 3.2.3 Multiple Vulnerabilities
High Nessus Network Monitor Plugin ID 5024
SynopsisThe remote host is vulnerable to multiple attack vectors
DescriptionThe version of Safari installed on the remote Windows host is earlier than 3.2.3. Such versions are potentially affected by several issues :
- A heap buffer overflow issue in the libxml library when handling long entity names could lead to a crash or arbitrary code execution. (CVE-2008-3529)
- A memory corruption issue in WebKit's handling of SVGList objects could lead to arbitrary code execution. (CVE-2009-0945)
SolutionUpgrade to Safari 3.2.3 or later.