Detections
Analytics
Mac OS X : Safari < 6.0.2 Multiple Vulnerabilities
high Log Correlation Engine Plugin ID 801001
Synopsis
The remote host contains a web browser that is affected by several vulnerabilities.Description
The remote Mac OS X host has Safari installed.Versions of Safari earlier than 6.0.2 are reportedly affected by several issues :
- A time-of-check-to-time-of-use issue in the handling of JavaScript array in WebKit could lead to arbitrary, remote code execution. (CVE-2012-3748)
- A use-after-free issue in the handling of SVG images in WebKit code could lead to arbitrary, remote code execution. (CVE-2012-5112)
Solution
Upgrade to Safari 6.0.2 or later.See Also
http://support.apple.com/kb/HT5568
http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html
Plugin Details
Severity: High
ID: 801001
Family: Web Clients
Published: 11/26/2012
Nessus ID: 62802
Vulnerability Information
Patch Publication Date: 11/1/2012
Vulnerability Publication Date: 10/10/2012
Reference Information
CVE: CVE-2012-3748, CVE-2012-5112