WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1009.

The remote Mac OS X host has Safari installed. 

Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities:

  - Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)

  - Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-1009, CVE-2013-1023)

The remote host has Safari installed. Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities :

  - Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)
 - Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-0879, CVE-2013-0991, CVE-2013-0992, CVE-2013-0993, CVE-2013-0994, CVE-2013-0995, CVE-2013-0996, CVE-2013-0997, CVE-2013-0998, CVE-2013-0999, CVE-2013-1000, CVE-2013-1001, CVE-2013-1002, CVE-2013-1003, CVE-2013-1004, CVE-2013-1005, CVE-2013-1006, CVE-2013-1007, CVE-2013-1008, CVE-2013-1009, CVE-2013-1010, CVE-2013-1011, CVE-2013-1023)

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues :

  - Multiple memory corruption vulnerabilities exist in     WebKit that could lead to unexpected program termination     or arbitrary code execution. (CVE-2013-0879 /     CVE-2013-0991 / CVE-2013-0992 / CVE-2013-0993 /     CVE-2013-0994 / CVE-2013-0995 / CVE-2013-0996 /     CVE-2013-0997 / CVE-2013-0998 / CVE-2013-0999 /     CVE-2013-1000 / CVE-2013-1001 / CVE-2013-1002 /     CVE-2013-1003 / CVE-2013-1004 / CVE-2013-1005 /     CVE-2013-1006 / CVE-2013-1007 / CVE-2013-1008 /     CVE-2013-1009 / CVE-2013-1010 / CVE-2013-1011 /     CVE-2013-1023)

  - A cross-site scripting issue exists in WebKit's handling     of iframes. (CVE-2013-1012)

  - A cross-site scripting issue exists in WebKit's handling     of copied and pasted data in HTML documents.
    (CVE-2013-0926)

  - In rewriting URLs to prevent cross-site scripting     attacks, XSS Auditor could be abused, leading to     malicious alteration of the behavior of a form     submission. (CVE-2013-1013)

ID	Name	Product	Family	Severity
801014	Mac OS X : Safari < 6.0.5 Multiple Security Vulnerabilities	Log Correlation Engine	Web Clients	medium
6856	Safari < 6.0.5 Multiple Security Vulnerabilities	Nessus Network Monitor	Web Clients	medium
66810	Mac OS X : Apple Safari < 6.0.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high

Detections

Analytics

CVE-2013-1023

high

Tenable Plugins

medium

medium

high