Detections
Analytics

Mac OS X : Safari < 6.0.5 Multiple Security Vulnerabilities

medium Log Correlation Engine Plugin ID 801014

Synopsis

The remote host contains a web browser that is affected by multiple security vulnerabilities.

Description

The remote Mac OS X host has Safari installed.

Versions of Safari earlier than 6.0.5 are reportedly affected by the following vulnerabilities:

 - Multiple cross-site scripting vulnerabilities (CVE-2013-1012, CVE-2013-1013)

 - Multiple memory-corruption vulnerabilities exist that can be triggered by a specially crafted webpage. A remote attacker can exploit these issues to execute arbitrary code in in context of the user. (CVE-2013-1009, CVE-2013-1023)

Solution

Upgrade to Safari 6.0.5 or later.

See Also

support.apple.com/kb/HT5785

http://.apple.com/safari

Plugin Details

Severity: Medium

ID: 801014

Family: Web Clients

Published: 6/5/2013

Vulnerability Information

Patch Publication Date: 6/5/2013

Vulnerability Publication Date: 6/5/2013

Reference Information

CVE: CVE-2013-1009, CVE-2013-1012, CVE-2013-1013, CVE-2013-1023

BID: 60330