Use-after-free vulnerability in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via run-in styling in an element, related to object pointers.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - WebKit: Improper handling of data types from event objects (CVE-2010-4205)

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and     Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a     denial of service (application crash) via vectors involving HTML document subtrees. (CVE-2010-1761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote mobile host is a using a version of Apple iOS earlier than 4.2. Such versions are potentially affected by multiple vulnerabilities. Apple iOS 4.2 contains security fixes for the following components :

  - Configuration Policies

  - CoreGraphics

  - FreeType

  - iAd Content Display

  - ImageIO

  - libxml

  - Mail

  - Networking

  - OfficeImport

  - Photos

  - Safari

  - Telephony

  - WebKit

  - Multiple components

The remote host has Safari installed.

Versions of Safari earlier than 4.1.2 / 5.0.2 are potentially affected by several issues in the following component :

  -  Webkit

The version of Safari installed on the remote Windows host is earlier than 5.0.2.  Such versions are potentially affected by several issues in the following components :

  - Safari

  - WebKit

The version of Apple Safari installed on the remote Mac OS X host is earlier than 5.0.2 / 4.1.2.  As such, it is potentially affected by several issues in the following component :

  - WebKit

ID	Name	Product	Family	Severity
199473	RHEL 6 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
5715	Apple iOS < 4.2 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	critical
800996	Safari < 4.1.2 / 5.0.2 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5655	Safari < 4.1.2 / 5.0.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
49144	Safari < 5.0.2 Multiple Vulnerabilities	Nessus	Windows	high
49143	Mac OS X : Apple Safari < 5.0.2 / 4.1.2	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2010-1806

critical

Tenable Plugins

critical

critical

high

medium

high

high