Test ID:	1.3.6.1.4.1.25623.1.0.801362
Category:	General
Title:	Apple Safari Multiple Vulnerabilities (Jun 2010)
Summary:	Apple Safari Web Browser is prone to multiple vulnerabilities.
Description:	Summary: Apple Safari Web Browser is prone to multiple vulnerabilities. Vulnerability Insight: Multiple issues are caused by use-after-free, double free, integer truncation, heap overflow, memory corruption, uninitialized memory access, input validation and implementation errors in ColorSync and WebKit. Vulnerability Impact: Successful exploitation will allow attacker to bypass certain security checks, gain knowledge of sensitive information or execute arbitrary code by tricking a user into visiting a specially crafted web page. Affected Software/OS: Apple Safari version prior to 5.0 (5.33.16.0) on Windows. Solution: Upgrade to Apple Safari version 5.0 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1385 http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html BugTraq ID: 40620 http://www.securityfocus.com/bid/40620 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7199 http://securitytracker.com/id?1024067 http://secunia.com/advisories/40105 http://www.vupen.com/english/advisories/2010/1373 Common Vulnerability Exposure (CVE) ID: CVE-2010-1384 http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html http://jvn.jp/en/jp/JVN46026251/index.html http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001538.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6812 http://secunia.com/advisories/42314 Common Vulnerability Exposure (CVE) ID: CVE-2010-1390 http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6888 http://secunia.com/advisories/40196 http://secunia.com/advisories/41856 http://secunia.com/advisories/43068 SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.ubuntu.com/usn/USN-1006-1 http://www.vupen.com/english/advisories/2010/1512 http://www.vupen.com/english/advisories/2010/2722 http://www.vupen.com/english/advisories/2011/0212 http://www.vupen.com/english/advisories/2011/0552 Common Vulnerability Exposure (CVE) ID: CVE-2010-1389 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6649 Common Vulnerability Exposure (CVE) ID: CVE-2010-1391 BugTraq ID: 40753 http://www.securityfocus.com/bid/40753 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7082 Common Vulnerability Exposure (CVE) ID: CVE-2010-1393 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7346 Common Vulnerability Exposure (CVE) ID: CVE-2010-1392 Bugtraq: 20100608 VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392) (Google Search) http://www.securityfocus.com/archive/1/511700/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7024 Common Vulnerability Exposure (CVE) ID: CVE-2010-1394 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7552 Common Vulnerability Exposure (CVE) ID: CVE-2010-1395 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7464 Common Vulnerability Exposure (CVE) ID: CVE-2010-1396 BugTraq ID: 40647 http://www.securityfocus.com/bid/40647 http://www.zerodayinitiative.com/advisories/ZDI-10-092 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7288 Common Vulnerability Exposure (CVE) ID: CVE-2010-1398 Bugtraq: 20100608 ZDI-10-097: Apple Webkit ContentEditable moveParagraphs Uninitialized Element Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511719/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-097 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7556 Common Vulnerability Exposure (CVE) ID: CVE-2010-1397 Bugtraq: 20100608 ZDI-10-095: Apple Webkit DOCUMENT_POSITION_DISCONNECTED Attribute Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511721/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-095 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6912 Common Vulnerability Exposure (CVE) ID: CVE-2010-1400 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=870 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7031 Common Vulnerability Exposure (CVE) ID: CVE-2010-1399 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6709 Common Vulnerability Exposure (CVE) ID: CVE-2010-1401 Bugtraq: 20100608 ZDI-10-098: Apple Webkit First-Letter Pseudo-Element Style Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511717/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-098 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6981 Common Vulnerability Exposure (CVE) ID: CVE-2010-1403 Bugtraq: 20100608 ZDI-10-099: Apple Webkit ProcessInstruction Target Error Message Insertion Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511722/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-099/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7519 Common Vulnerability Exposure (CVE) ID: CVE-2010-1402 Bugtraq: 20100608 ZDI-10-100: Apple Webkit ConditionEventListener Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511723/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-100 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7071 Common Vulnerability Exposure (CVE) ID: CVE-2010-1404 Bugtraq: 20100608 ZDI-10-096: Apple Webkit Recursive Use Element Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511718/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-096 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7497 Common Vulnerability Exposure (CVE) ID: CVE-2010-1406 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7197 Common Vulnerability Exposure (CVE) ID: CVE-2010-1405 BugTraq ID: 40659 http://www.securityfocus.com/bid/40659 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7252 Common Vulnerability Exposure (CVE) ID: CVE-2010-1408 BugTraq ID: 40697 http://www.securityfocus.com/bid/40697 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7295 Common Vulnerability Exposure (CVE) ID: CVE-2010-1409 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6836 Common Vulnerability Exposure (CVE) ID: CVE-2010-1410 BugTraq ID: 40657 http://www.securityfocus.com/bid/40657 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7150 Common Vulnerability Exposure (CVE) ID: CVE-2010-1413 BugTraq ID: 40733 http://www.securityfocus.com/bid/40733 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7255 Common Vulnerability Exposure (CVE) ID: CVE-2010-1412 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7606 Common Vulnerability Exposure (CVE) ID: CVE-2010-1414 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7041 Common Vulnerability Exposure (CVE) ID: CVE-2010-1416 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7401 Common Vulnerability Exposure (CVE) ID: CVE-2010-1415 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7374 Common Vulnerability Exposure (CVE) ID: CVE-2010-1417 BugTraq ID: 40672 http://www.securityfocus.com/bid/40672 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6876 Common Vulnerability Exposure (CVE) ID: CVE-2010-1422 http://lists.apple.com/archives/security-announce/2010//Sep/msg00002.html https://bugzilla.mozilla.org/show_bug.cgi?id=552255 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7591 Common Vulnerability Exposure (CVE) ID: CVE-2010-1750 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7143 Common Vulnerability Exposure (CVE) ID: CVE-2010-1749 Bugtraq: 20100608 ZDI-10-101: Apple Webkit SVG RadialGradiant Run-in Remote Code Execution Vulnerability (Google Search) http://www.securityfocus.com/archive/1/511725/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-10-101 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7180 Common Vulnerability Exposure (CVE) ID: CVE-2010-1418 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6871 Common Vulnerability Exposure (CVE) ID: CVE-2010-0544 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6656 Common Vulnerability Exposure (CVE) ID: CVE-2010-1419 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7314 Common Vulnerability Exposure (CVE) ID: CVE-2010-1758 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7335 Common Vulnerability Exposure (CVE) ID: CVE-2010-1421 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6739 Common Vulnerability Exposure (CVE) ID: CVE-2010-1761 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7157 Common Vulnerability Exposure (CVE) ID: CVE-2010-1759 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7005 Common Vulnerability Exposure (CVE) ID: CVE-2010-1762 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7503 Common Vulnerability Exposure (CVE) ID: CVE-2010-1770 http://zerodayinitiative.com/advisories/ZDI-10-093/ https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7099 http://secunia.com/advisories/40072 Common Vulnerability Exposure (CVE) ID: CVE-2010-1764 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7347 Common Vulnerability Exposure (CVE) ID: CVE-2010-1774 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7476 XForce ISS Database: safari-webkit-htmltables-ce(59218) https://exchange.xforce.ibmcloud.com/vulnerabilities/59218 Common Vulnerability Exposure (CVE) ID: CVE-2010-1771 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6862 XForce ISS Database: safari-webkit-fonts-ce(59214) https://exchange.xforce.ibmcloud.com/vulnerabilities/59214 Common Vulnerability Exposure (CVE) ID: CVE-2010-2264 BugTraq ID: 40756 http://www.securityfocus.com/bid/40756
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.