Safari < 6.0.5 Multiple Security Vulnerabilities

Medium Nessus Network Monitor Plugin ID 6856

Synopsis

The remote host contains a web browser that is affected by multiple security vulnerabilities.

Description

The remote host has Safari installed. Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities :

- Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)
- Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-0879, CVE-2013-0991, CVE-2013-0992, CVE-2013-0993, CVE-2013-0994, CVE-2013-0995, CVE-2013-0996, CVE-2013-0997, CVE-2013-0998, CVE-2013-0999, CVE-2013-1000, CVE-2013-1001, CVE-2013-1002, CVE-2013-1003, CVE-2013-1004, CVE-2013-1005, CVE-2013-1006, CVE-2013-1007, CVE-2013-1008, CVE-2013-1009, CVE-2013-1010, CVE-2013-1011, CVE-2013-1023)

Solution

Upgrade to Safari 6.0.5 or later.

See Also

http://support.apple.com/kb/HT5785

http://www.apple.com/safari

Plugin Details

Severity: Medium

ID: 6856

File Name: 6856.prm

Family: Web Clients

Published: 2013/06/05

Modified: 2016/03/24

Dependencies: 3705

Nessus ID: 66810

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 5.6

Temporal Score: 4.9

Vector: CVSS3#AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:apple:safari

Patch Publication Date: 2013/06/05

Vulnerability Publication Date: 2013/06/05

Reference Information

CVE: CVE-2013-0879, CVE-2013-0926, CVE-2013-0991, CVE-2013-0992, CVE-2013-0993, CVE-2013-0994, CVE-2013-0995, CVE-2013-0996, CVE-2013-0997, CVE-2013-0998, CVE-2013-0999, CVE-2013-1000, CVE-2013-1001, CVE-2013-1002, CVE-2013-1003, CVE-2013-1004, CVE-2013-1005, CVE-2013-1006, CVE-2013-1007, CVE-2013-1008, CVE-2013-1009, CVE-2013-1010, CVE-2013-1011, CVE-2013-1012, CVE-2013-1013, CVE-2013-1023

BID: 58731, 59326, 59944, 59953, 59954, 59955, 59956, 59957, 59958, 59959, 59960, 59963, 59964, 59965, 59967, 59970, 59971, 59972, 59973, 59974, 59976, 59977, 60361, 60362, 60363, 60364

OSVDB: 90521, 91704, 93470, 93471, 93472, 93473, 93474, 93475, 93476, 93477, 93478, 93479, 93480, 93481, 93482, 93483, 93484, 93485, 93486, 93487, 93488, 93489, 93915, 93916, 93917, 93918