Apple Safari Webkit Remote Code Execution Vulnerability - May13 (Mac OS X)

  1. Network Vulnerabilities
  2. General
  3. Apple Safari Webkit Remote Code Execution Vulnerability - May13 (Mac OS X)
Summary
The host is installed with Apple Safari web browser and is prone to remote code execution vulnerability.
Impact
Successful exploitation will let the attackers to execute arbitrary code via crafted SVG document. Impact Level: System/Application
Solution
Upgrade to Apple Safari version 6.0.4 or later, For updates refer to http://www.apple.com/support/downloads
Insight
WebKit contains a type confusion flaw in the 'SVGViewSpec::viewTarget' function in WebCore/svg/SVGViewSpec.cpp when handling non-SVG elements.
Affected
Apple Safari versions prior to 6.0.4 on Mac OS X
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities