Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable700033.PRM
HistoryMar 31, 2017 - 12:00 a.m.

Safari < 10.1 Multiple Vulnerabilities

2017-03-3100:00:00
Tenable
www.tenable.com
37
JSON

Versions of Safari prior to 10.1 are affected by multiple vulnerabilities :

  • An unspecified state management flaw exists that may allow a context-dependent attacker to spoof the address bar. No further details have been provided. (CVE-2017-2376)
  • An unspecified flaw exists in the handling of HTTP authentication. This may allow a context-dependent attacker to display authentication sheets on arbitrary web sites and cause a denial of service. (CVE-2017-2389)

Additional flaws exist in the following components :

  • AutofFill (CVE-2017-2385)
  • CoreGraphics (CVE-2017-2444)
  • FaceTime (2017-2453)
  • Kernel (CVE-2017-2490)
  • Webkit (CVE-2017-2367, CVE-2017-2378, CVE-2017-2386, CVE-2017-2394, CVE-2017-2395, CVE-2017-2396, CVE-2017-2405, CVE-2017-2415, CVE-2017-2419, CVE-2017-2424, CVE-2017-2433, CVE-2017-2442, CVE-2017-2445, CVE-2017-2446, CVE-2017-2447, CVE-2017-2454, CVE-2017-2455, CVE-2017-2459, CVE-2017-2460, CVE-2017-2464, CVE-2017-2465, CVE-2017-2466, CVE-2017-2468, CVE-2017-2469, CVE-2017-2470, CVE-2017-2471, CVE-2017-2476, CVE-2017-2481)
Binary data 700033.prm
VendorProductVersionCPE
applesafaricpe:/a:apple:safari

References

Related

openvas 3
archlinux 1
nessus 7
ubuntu 1
mageia 1
apple 8
gentoo 2
ubuntucve 29
prion 33
debiancve 28
cve 33
packetstorm 13
seebug 18
zdt 18
zdi 2
talosblog 1
talos 1
openvas
openvas
Ubuntu: Security Advisory (USN-3257-1)
2017-04-11 00:00:00
Apple Safari Multiple Vulnerabilities (HT207600)
2017-03-31 00:00:00
Mageia: Security Advisory (MGASA-2017-0109)
2022-01-28 00:00:00
archlinux
archlinux
[ASA-201704-9] webkit2gtk: multiple issues
2017-04-28 00:00:00
nessus
nessus
Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3257-1)
2017-04-11 00:00:00
macOS : Apple Safari < 10.1 Multiple Vulnerabilities
2017-04-03 00:00:00
Apple iOS < 10.3 Multiple Vulnerabilities
2017-03-31 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2017-04-10 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerability
2017-04-16 09:29:12
apple
apple
About the security content of Safari 10.1
2017-03-27 00:00:00
About the security content of Safari 10.1 - Apple Support
2017-08-29 02:51:42
About the security content of tvOS 10.2 - Apple Support
2017-06-20 10:43:59
gentoo
gentoo
WebKitGTK+: Multiple vulnerabilities
2017-06-07 00:00:00
WebKitGTK+: Multiple vulnerabilities
2017-09-17 00:00:00
ubuntucve
ubuntucve
CVE-2017-2396
2017-04-01 00:00:00
CVE-2017-2405
2017-04-01 00:00:00
CVE-2017-2395
2017-04-01 00:00:00
prion
prion
Memory corruption
2017-04-02 01:59:00
Memory corruption
2017-04-02 01:59:00
Memory corruption
2017-04-02 01:59:00
debiancve
debiancve
CVE-2017-2396
2017-04-02 01:59:00
CVE-2017-2405
2017-04-02 01:59:00
CVE-2017-2395
2017-04-02 01:59:00
cve
cve
CVE-2017-2405
2017-04-02 01:59:00
CVE-2017-2385
2017-04-02 01:59:00
CVE-2017-2395
2017-04-02 01:59:00
packetstorm
packetstorm
WebKit WebCore::toJS Use-After-Free
2017-04-10 00:00:00
Apple Webkit Named Property UXSS
2017-04-09 00:00:00
WebKit Document::adoptNode Use-After-Free
2017-04-09 00:00:00
seebug
seebug
MacOS/iOS kernel double free due to bad locking in fsevents device（CVE-2017-2490）
2017-04-04 00:00:00
Apple Webkit: UXSS by accessing a named property from an unloaded window (CVE-2017-2367)
2017-04-04 00:00:00
WebKit: WebCore::toJS use-after-free（CVE-2017-2476）
2017-04-05 00:00:00
zdt
zdt
macOS / iOS Kernel 10.12.3 (16D32) - Double-Free Due to Bad Locking in fsevents Device Exploit
2017-04-05 00:00:00
Apple WebKit - FormSubmission::create Use-After-Free Exploit
2017-04-05 00:00:00
Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
2017-04-05 00:00:00
zdi
zdi
Apple Safari ElementData Use-After-Free Remote Code Execution Vulnerability
2017-03-28 00:00:00
Apple Safari Node Use-After-Free Remote Code Execution Vulnerability
2017-06-22 00:00:00
talosblog
talosblog
Vulnerability Spotlight: Content Security Policy bypass in Microsoft Edge, Google Chrome and Apple Safari
2017-09-06 11:18:00
talos
talos
Microsoft Edge Content Security Bypass Vulnerability
2017-09-06 00:00:00
JSON
Related for 700033.PRM
openvas3archlinux1nessus7ubuntu1mageia1apple8gentoo2ubuntucve29prion33debiancve28cve33packetstorm13seebug18zdt18zdi2talosblog1talos1