Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable800990.PRM
HistorySep 20, 2012 - 12:00 a.m.

Mac OS X : Safari < 6.0.1 Multiple Vulnerabilities

2012-09-2000:00:00
Tenable
www.tenable.com
10

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.087 Low

EPSS

Percentile

94.6%

JSON

The remote Mac OS X host has Safari installed.

Versions of Safari earlier than 6.0.1 are reportedly affected by several issues :

  • A logic error in Safari’s handling of the Quarantine attribute caused the safe mode not to be triggered on Quarantined files, which could lead to the disclosure of local file contents. (CVE-2012-3713)

  • A rare condition in the handling of Form Autofill could lead to the disclosure of information from the Address Book ‘Me’ card that was not included in the Autofill popover. (CVE-2012-3714)

  • A logic issue in the handling of HTTPS URLs in the address bar when pasting text could result in the request being sent over HTTP. (CVE-2012-3715)

  • Numerous issues exist in WebKit. (CVE-2011-3105, CVE-2012-2817, CVE-2012-2818, CVE-2012-2829, CVE-2012-2831, CVE-2012-2842, CVE-2012-2843, CVE-2012-3598, CVE-2012-3601, CVE-2012-3602, CVE-2012-3606, CVE-2012-3607, CVE-2012-3612, CVE-2012-3613, CVE-2012-3614, CVE-2012-3616, CVE-2012-3617, CVE-2012-3621, CVE-2012-3622,CVE-2012-3623, CVE-2012-3624, CVE-2012-3632, CVE-2012-3643, CVE-2012-3647, CVE-2012-3648, CVE-2012-3649, CVE-2012-3651, CVE-2012-3652,CVE-2012-3654, CVE-2012-3657, CVE-2012-3658,CVE-2012-3659, CVE-2012-3660, CVE-2012-3671,CVE-2012-3672, CVE-2012-3673, CVE-2012-3675,CVE-2012-3676, CVE-2012-3677, CVE-2012-3684,CVE-2012-3685, CVE-2012-3687, CVE-2012-3688,CVE-2012-3692, CVE-2012-3699, CVE-2012-3700,CVE-2012-3701, CVE-2012-3702, CVE-2012-3703,CVE-2012-3704, CVE-2012-3705, CVE-2012-3706,CVE-2012-3707, CVE-2012-3708, CVE-2012-3709,CVE-2012-3710, CVE-2012-3711, CVE-2012-3712)

Binary data 800990.prm

References

Related

securityvulns 2
openvas 15
nessus 9
chrome 1
freebsd 1
threatpost 2
cvelist 35
prion 31
cve 33
ubuntucve 32
suse 1
checkpoint_advisories 1
nvd 32
debiancve 3
jvn 1
securityvulns
securityvulns
APPLE-SA-2012-09-19-3 Safari 6.0.1
2012-09-24 00:00:00
Apple Safari / WebKit / Google Chrome multiple security vulnerabilities
2012-09-24 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities (Oct 2012) - Mac OS X
2012-10-01 00:00:00
Apple Safari Multiple Vulnerabilities - Oct 2012 (Mac OS X)
2012-10-01 00:00:00
Apple iTunes Multiple Vulnerabilities (Sep 2012) - Windows
2012-09-17 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 6.0.1 Multiple Vulnerabilities
2012-09-20 00:00:00
Safari < 6.0.1 Multiple Vulnerabilities
2012-09-20 00:00:00
Apple iTunes < 10.7 Multiple Vulnerabilities (uncredentialed check)
2012-09-13 00:00:00
chrome
chrome
Stable Channel Update
2012-07-11 00:00:00
freebsd
freebsd
www/chromium -- multiple vulnerabilities
2012-07-11 00:00:00
threatpost
threatpost
Google Patches Three High-Priority Flaws in Chrome 20
2012-07-11 17:48:09
Apple Releases iOS 6.1 With Fixes for More Than 20 Vulnerabilities
2013-01-29 14:25:53
cvelist
cvelist
CVE-2012-3675
2012-09-13 10:00:00
CVE-2012-3617
2012-09-13 10:00:00
CVE-2012-3616
2012-09-13 10:00:00
prion
prion
Memory corruption
2012-09-13 10:30:00
Memory corruption
2012-09-13 10:30:00
Memory corruption
2012-09-13 10:30:00
cve
cve
CVE-2012-3617
2012-09-13 10:30:19
CVE-2012-3675
2012-09-13 10:30:20
CVE-2012-3685
2012-09-13 10:30:20
ubuntucve
ubuntucve
CVE-2012-3675
2012-09-13 00:00:00
CVE-2012-3685
2012-09-13 00:00:00
CVE-2012-3700
2012-09-13 00:00:00
suse
suse
update for chromium, v8 (important)
2012-08-15 16:09:13
checkpoint_advisories
checkpoint_advisories
Apple Safari WebKit CSS Title Memory Corruption (CVE-2012-3684)
2012-11-18 00:00:00
nvd
nvd
CVE-2012-3617
2012-09-13 10:30:19
CVE-2012-2843
2012-07-12 21:55:06
CVE-2012-3706
2012-09-13 10:30:21
debiancve
debiancve
CVE-2012-2843
2012-07-12 21:55:00
CVE-2012-2829
2012-06-27 10:18:00
CVE-2012-2831
2012-06-27 10:18:00
jvn
jvn
JVN#42676559: Safari vulnerable to local file content disclosure
2012-10-23 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.087 Low

EPSS

Percentile

94.6%

JSON
Related for 800990.PRM
securityvulns2openvas15nessus9chrome1freebsd1threatpost2cvelist35prion31cve33ubuntucve32suse1checkpoint_advisories1nvd32debiancve3jvn1