Detections
Analytics
Safari < 6.0.2 Multiple Vulnerabilities
high Nessus Network Monitor Plugin ID 6622
Synopsis
The remote host contains a web browser that is affected by several vulnerabilities.Description
The remote host has Safari installed. Versions of Safari earlier than 6.0.2 are reportedly affected by several issues :- A time-of-check-to-time-of-use issue in the handling of JavaScript array in WebKit could lead to arbitrary, remote code execution. (CVE-2012-3748)
- A use-after-free issue in the handling of SVG images in WebKit code could lead to arbitrary, remote code execution. (CVE-2012-5112)
Solution
Upgrade to Safari 6.0.2 or later.See Also
http://support.apple.com/kb/HT5568
http://lists.apple.com/archives/security-announce/2012/Nov/msg00001.html
Plugin Details
Severity: High
ID: 6622
Family: Web Clients
Published: 11/26/2012
Updated: 3/6/2019
Nessus ID: 62802
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: High
Base Score: 8.1
Temporal Score: 7.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:apple:safari
Patch Publication Date: 11/1/2012
Vulnerability Publication Date: 10/10/2012
Reference Information
CVE: CVE-2012-3748, CVE-2012-5112