Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

The remote host has Safari installed. Versions of Safari earlier than 6.1 are reportedly affected by the following vulnerabilities :

  - A bounds-checking issue exists related to handling XML files. (CVE-2013-1036)
 - Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code execution. (CVE-2013-1037, CVE-2013-1038, CVE-2013-1039, CVE-2013-1040, CVE-2013-1041, CVE-2013-1042, CVE-2013-1043, CVE-2013-1044, CVE-2013-1045, CVE-2013-1046, CVE-2013-1047, CVE-2013-2842, CVE-2013-5125, CVE-2013-5126, CVE-2013-5127, CVE-2013-5128)
 - An error exists related to URL handling that could lead to information disclosure. (CVE-2013-2848)
 - A cross-site scripting issue exists in WebKit's handling of URLs and drag-and-drop operations. (CVE-2013-5129, CVE-2013-5131)
 - Using 'Web Inspector' could negate 'Private Browsing' protections leading to information disclosure. (CVE-2013-5130)

The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.1. It is, therefore, potentially affected by several issues :

  - A bounds-checking issue exists related to handling XML     files. (CVE-2013-1036)

  - Multiple memory corruption vulnerabilities exist in     WebKit that could lead to unexpected program termination     or arbitrary code execution. (CVE-2013-1037,     CVE-2013-1038, CVE-2013-1039, CVE-2013-1040,     CVE-2013-1041, CVE-2013-1042, CVE-2013-1043,     CVE-2013-1044, CVE-2013-1045, CVE-2013-1046,     CVE-2013-1047, CVE-2013-2842, CVE-2013-5125,     CVE-2013-5126, CVE-2013-5127, CVE-2013-5128)

  - An error exists related to URL handling that could lead     to information disclosure. (CVE-2013-2848)

  - A cross-site scripting issue exists in WebKit's handling     of URLs and drag-and-drop operations. (CVE-2013-5129,     CVE-2013-5131)

  - Using 'Web Inspector' could negate 'Private Browsing'     protections leading to information disclosure.
    (CVE-2013-5130)

  - An error exists related to the 'Reopen All Windows     from Last Session' feature that could allow a local     attacker to obtain plaintext user ID and password     information from the 'LastSession.plist' file.
    (CVE-2013-7127)

The mobile device is running a version of iOS that is older than version 7.  This version contains security-related fixes for the following components :

  - Certificate Trust Policy
  - CoreGraphics
  - CoreMedia
  - Data Protection
  - Data Security
  - dyld
  - File Systems
  - ImageIO
  - IOKit
  - IOKitUser
  - IOSerialFamily
  - IPSec
  - Kernel
  - Kext Management
  - libxml
  - libxslt
  - Passcode Lock
  - Personal Hotspot
  - Push Notifications
  - Safari
  - Sandbox
  - Social
  - Springboard
  - Telephony
  - Twitter
  - WebKit

According to its banner, the remote Apple iOS device is missing a security update.  Versions of Apple iOS older than 7.0 are affected by vulnerabilities within the following components :

 - Certificate Trust Policy
 - CoreGraphics
 - CoreMedia
 - Data Protection
 - Data Security
 - File Systems
 - IOKit
 - IOKitUser
 - IOSerialFamily
 - IPSec
 - ImageIO
 - Kernel
 - Kext Management
 - Passcode Lock
 - Personal Hotspot
 - Push Notifications
 - Safari
 - Sandbox
 - Social
 - Springboard
 - Telephony
 - Twitter
 - WebKit
 - dyld
 - libxml
 - libxslt

ID	Name	Product	Family	Severity
8048	Safari < 6.1 Multiple Security Vulnerabilities	Nessus Network Monitor	Web Clients	medium
70563	Mac OS X : Apple Safari < 6.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
69984	Apple iOS < 7 Multiple Vulnerabilities	Nessus	Mobile Devices	high
8013	Apple iOS < 7.0 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	critical

Detections

Analytics

CVE-2013-5131

medium

Tenable Plugins

medium

high

high

critical