The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)

  - Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a     denial of service or possibly have unspecified other impact via vectors related to the handling of input.
    (CVE-2013-2871)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.3 or 7.0.3. It is, therefore, potentially affected by the following vulnerabilities related to the included WebKit components :

  - Unspecified errors exist that could allow memory     corruption, application crashes and possibly arbitrary     code execution. (CVE-2013-2871, CVE-2013-2926,     CVE-2013-2928, CVE-2013-6625, CVE-2014-1289,     CVE-2014-1290, CVE-2014-1291, CVE-2014-1292,     CVE-2014-1293, CVE-2014-1294, CVE-2014-1298,     CVE-2014-1299, CVE-2014-1300, CVE-2014-1301,     CVE-2014-1302, CVE-2014-1303, CVE-2014-1304,     CVE-2014-1305, CVE-2014-1307, CVE-2014-1308,     CVE-2014-1309, CVE-2014-1310, CVE-2014-1311,     CVE-2014-1312, CVE-2014-1313, CVE-2014-1713)

  - An error exists related to IPC messages and 'WebProcess'     that could allow an attacker to read arbitrary files.
    (CVE-2014-1297)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - WebKit: Improper handling of data types from event objects (CVE-2010-4205)

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and     Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a     denial of service (application crash) via vectors involving HTML document subtrees. (CVE-2010-1761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host has Safari installed that is older than 6.1.3 or 7.0.3, and is thus unpatched for the following WebKit vulnerabilities :

 - Unspecified errors exist that could allow memory corruption, application crashes and possibly arbitrary code execution. (CVE-2013-2871, CVE-2013-2926, CVE-2013-2928, CVE-2013-6625, CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, CVE-2014-1294, CVE-2014-1298, CVE-2014-1299, CVE-2014-1300, CVE-2014-1301, CVE-2014-1302, CVE-2014-1303, CVE-2014-1304, CVE-2014-1305, CVE-2014-1307, CVE-2014-1308, CVE-2014-1309, CVE-2014-1310, CVE-2014-1311, CVE-2014-1312, CVE-2014-1313, CVE-2014-1713)
 - An error exists related to IPC messages and 'WebProcess' that could allow an attacker to read arbitrary files. (CVE-2014-1297)

ID	Name	Product	Family	Published	Updated	Severity
199451	RHEL 7 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/8/2024	critical
73304	Mac OS X : Apple Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	4/2/2014	11/26/2019	critical
199473	RHEL 6 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	6/3/2024	10/8/2024	critical
8209	Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	4/10/2014	3/6/2019	high

Detections

Analytics

Plugins Search

critical

critical

critical

high