Summary
The host is running Apple Saferi and is prone to multiple vulnerabilities.
Impact
Successful exploitation could allow remote attackers to send a malformed CSS stylesheet tag containing an overly long string, which leads to application crash or possibly execute arbitrary code on the system.
Impact Level: System/Application
Solution
Upgrade to Apple Saferi 5.0 or later,
For updates refer to http://support.apple.com/downloads
Insight
The flaws are cuased by,
- Error in the 'CSSSelector()' function when handling CSS stylesheet tag containing an overly long string.
- Improper bounds checking by the 'WebKit' library when processing CSS stylesheet tag containing an overly long string.
- Use-after-free error when handling of a deleted window object, allows attackers to execute arbitrary code by using 'window.open' to create a popup window for a crafted HTML document, and then calling the parent window&qts close method.
- Includes HTTP basic authentication credentials in an HTTP request if a web page that requires HTTP basic authentication redirects to a different domain.
Affected
Apple Saferi version 4.0.5 and lower
References
Severity
Classification
-
CVE CVE-2010-1029, CVE-2010-1939 -
CVSS Base Score: 7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Acrobat and Reader PDF Handling Multiple Vulnerabilities (Linux)
- Adobe Acrobat Multiple Vulnerabilities -01 Jan 13 (Mac OS X)
- Adobe Acrobat Multiple Vulnerabilities - 01 May14 (Windows)
- Adobe Extension Manager CS5 Insecure Library Loading Vulnerability (Win)
- Adobe Acrobat Multiple Vulnerabilities - 01 Jan14 (Windows)