Apple Safari WebKit Arbitrary Code Execution Vulnerability (CNVD-2017-13805)

Apple Safari is a web browser from Apple, and is the default browser that comes with the Mac OS X and iOS operating systems.WebKit is a set of open-source web browser engines developed by KDE, Apple, and Google, and is currently used by Apple Safari and Google Chrome, among other browsers. Google...

Apple Safari WebKit Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08086)

Apple Safari is a WEB browser developed by Apple. An unspecified memory corruption arbitrary code execution vulnerability exists in Apple Safari WebKit, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Apple Safari WebKit Memory Corruption Arbitrary Code Execution Vulnerability (CNVD-2015-08089)

Apple Safari is a WEB browser developed by Apple. An unspecified memory corruption arbitrary code execution vulnerability exists in Apple Safari WebKit, which allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or execute...

Apple Safari WebKit Security Bypass Vulnerability

Apple Safari is an open source WEB browser. A security vulnerability exists in Apple Safari that allows remote attackers to exploit a vulnerability to build malicious web pages, trick users into parsing them, and bypass Content Security Policy restrictions...

Apple Safari WebKit suffers from an unspecified memory corruption vulnerability (CNVD-2015-05417)

Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...

Apple Safari WebKit suffers from unspecified memory corruption vulnerability (CNVD-2015-05424)

Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...

Apple Safari WebKit suffers from unspecified memory corruption vulnerability (CNVD-2015-05410)

Apple Safari is an open source WEB browser. An unspecified memory corruption vulnerability exists in Apple Safari WebKit, which allows remote attackers to exploit the vulnerability to construct a malicious web page and trick the user into parsing it, which could crash the application or execute...

CVE-2014-4474

WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in...

Apple Safari / WebKit memory corruption

Memory corruption via SVG...

Apple Safari Webkit - libxslt Arbitrary File Creation (Metasploit)

$Id: safarixsltoutput.rb 13987 2011-10-18 07:39:50Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability

ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-239 July 27, 2011 -- CVE ID: CVE-2011-0233 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple WebKit --...

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

ZDI-11-098: Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-098 March 2, 2011 -- CVE ID: CVE-2011-0132 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Apple -- Affected Products: Apple WebKit -- Vulnerabili...

Apple Safari Webkit Runin Box Promotion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way th...

Apple Webkit Anchor Tag Mouse Click Event Dispatch Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2010-1413

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

Information disclosure

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors...

Apple Safari / WebKit DoS

Stack overflow stack memory exhaustion on eval expression parsing...

CVE-2009-1688

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is...

CVE-2009-1698

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets CSS attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code ...