Summary
The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow attackers to execute arbitrary code in the context of the browser.
Impact Level: System/Application
Solution
Upgrade to Apple Safari version 5.0.5 or later,
For updates refer to http://www.apple.com/safari/download/
Insight
Multiple flaws are due to
- An integer overflow error in WebKit related to CSS 'style handling', nodesets, and a length value.
- A use-after-free error within WebKit when handling WBR tags.
Affected
Apple Safari versions prior to 5.0.5
References
Severity
Classification
-
CVE CVE-2011-1290, CVE-2011-1344 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Acrobat Multiple Unspecified Vulnerabilities-01 Sep13 (Mac OS X)
- Adobe Acrobat Multiple Vulnerabilities - 01 Jan14 (Mac OS X)
- Adobe Flash Player 'SWF' File Multiple Code Execution Vulnerability - Windows
- Adobe Air Code Execution and DoS Vulnerabilities (MAC OS X)
- Adobe Air and Flash Player Multiple Vulnerabilities (Mac OS X)