Lucene search

K
nessusTenable8137.PRM
HistoryFeb 26, 2014 - 12:00 a.m.

Safari < 6.1.2 / 7.0.2 Multiple Vulnerabilities

2014-02-2600:00:00
Tenable
www.tenable.com
15

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

The remote host has Safari installed that is older than 6.1.2 or 7.0.2, which means it is not patched for the following WebKit vulnerabilities :

  • Unspecified memory-corruption vulnerabilities that could be leveraged to execute arbitrary code, or cause denial of service. (CVE-2014-1268, CVE-2014-1269, CVE-2014-1270)
  • Use-after-free error in the β€˜ReplaceSelectionCommand’ file which can be leveraged to execute arbitrary code, or cause denial of service (CVE-2013-6635)
Binary data 8137.prm
VendorProductVersionCPE
applesafaricpe:/a:apple:safari

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%