Safari < 3.2.3 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 3.2.3. Such versions are potentially affected by several issues :

• A heap buffer overflow issue in the libxml library when handling long entity names could lead to a crash or arbitrary code execution. (CVE-2008-3529)

• Multiple input validation issues exist in Safari’s handling of ‘feed:’ URLs, which could be abused to execute arbitrary JavaScript code. (CVE-2009-0162)

• A memory corruption issue in WebKit’s handling of SVGList objects could lead to arbitrary code execution. (CVE-2009-0945)