Kaspersky LabKLA10075KLA10075 Multiple vulnerabilities in Apple Safari
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.057 Low
EPSS
Percentile
93.2%
Detect date:
07/25/2012
Severity:
Critical
Description:
Multiple critical vulnerabilities have been found in Apple Safari. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, inject code, bypass security restrictions, spoof user interfaces or read local files. Below is a complete list of vulnerabilities
Affected products:
Apple Safari versions 5.1.7 and earlier
Solution:
5.1.7 became latest version for windows, still containing this vulnerabilities. You can choose another browser to use.
Original advisories:
Apple mailing list
Apple safari 5.1.8
Impacts:
OSI
Related products:
CVE-IDS:
CVE-2012-36915.8High
CVE-2012-36904.3Warning
CVE-2012-36269.3Critical
CVE-2012-36279.3Critical
CVE-2012-36369.3Critical
CVE-2012-36539.3Critical
CVE-2012-36559.3Critical
CVE-2012-36569.3Critical
CVE-2012-36159.3Critical
CVE-2012-36935.0Critical
CVE-2012-15209.3Critical
CVE-2012-36099.3Critical
CVE-2012-36504.3Warning
CVE-2012-35939.3Critical
CVE-2012-35899.3Critical
CVE-2012-36039.3Critical
CVE-2012-36059.3Critical
CVE-2012-36049.3Critical
CVE-2012-06805.0Critical
CVE-2012-36679.3Critical
CVE-2012-36964.3Warning
CVE-2012-36944.3Warning
CVE-2012-36954.3Warning
CVE-2012-36299.3Critical
CVE-2012-36409.3Critical
CVE-2012-36089.3Critical
CVE-2012-35999.3Critical
CVE-2012-06784.3Warning
CVE-2012-36359.3Critical
CVE-2012-36349.3Critical
CVE-2012-36259.3Critical
CVE-2012-36459.3Critical
CVE-2012-06839.3Critical
CVE-2012-36639.3Critical
CVE-2012-35969.3Critical
CVE-2012-35949.3Critical
CVE-2012-36209.3Critical
CVE-2012-36119.3Critical
CVE-2012-36709.3Critical
CVE-2012-35979.3Critical
CVE-2012-36009.3Critical
CVE-2012-36339.3Critical
CVE-2012-36789.3Critical
CVE-2012-36799.3Critical
CVE-2012-36289.3Critical
CVE-2012-36379.3Critical
CVE-2012-36749.3Critical
CVE-2012-36399.3Critical
CVE-2012-36109.3Critical
CVE-2012-36189.3Critical
CVE-2012-35919.3Critical
CVE-2012-35929.3Critical
CVE-2012-06794.3Warning
CVE-2012-36419.3Critical
CVE-2012-35959.3Critical
CVE-2012-36977.1High
CVE-2012-36389.3Critical
CVE-2012-35908.8Critical
CVE-2012-36895.8High
CVE-2012-36619.3Critical
CVE-2012-36319.3Critical
CVE-2012-06829.3Critical
CVE-2012-36689.3Critical
CVE-2012-36699.3Critical
CVE-2012-36649.3Critical
CVE-2012-36659.3Critical
CVE-2012-36669.3Critical
CVE-2012-36839.3Critical
CVE-2012-36469.3Critical
CVE-2012-36869.3Critical
CVE-2012-36429.3Critical
CVE-2012-36309.3Critical
CVE-2012-36449.3Critical
CVE-2012-36829.3Critical
CVE-2012-36809.3Critical
CVE-2012-36819.3Critical
References
lists.apple.com/archives/security-announce/2012/Jul/msg00000.html
www.intego.com/mac-security-blog/apple-shocks-security-world-with-safari-5-1-8-for-snow-leopard/
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0678
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0679
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0680
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0682
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0683
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1520
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3589
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3590
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3591
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3592
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3593
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3594
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3595
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3596
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3597
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3599
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3600
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3603
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3604
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3605
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3608
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3609
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3610
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3611
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3615
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3618
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3620
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3625
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3626
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3627
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3628
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3629
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3630
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3631
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3633
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3634
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3635
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3636
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3637
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3638
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3639
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3640
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3641
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3642
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3644
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3645
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3646
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3650
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3653
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3655
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3656
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3661
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3663
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3664
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3665
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3666
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3667
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3668
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3669
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3670
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3674
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3678
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3679
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3680
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3681
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3682
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3683
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3686
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3689
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3690
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3691
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3693
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3694
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3695
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3696
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3697
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Safari-for-Windows/
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.057 Low
EPSS
Percentile
93.2%