Test ID:	1.3.6.1.4.1.25623.1.0.810207
Category:	General
Title:	Apple Safari Multiple Vulnerabilities (Nov 2016) - Mac OS X
Summary:	Apple Safari is prone to multiple vulnerabilities.
Description:	Summary: Apple Safari is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - The 'Clear History and Website Data' feature mishandles the deletion of browsing history. - An insufficient taint tracking issue in the parsing of svg images. - Multiple memory corruption issues. Vulnerability Impact: Successful exploitation will allow local attackers to obtain sensitive information, remote attackers to execute arbitrary code or cause a denial of service. Affected Software/OS: Apple Safari versions before 9.1.1 Solution: Upgrade to Apple Safari version 9.1.1 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1849 http://lists.apple.com/archives/security-announce/2016/May/msg00002.html http://lists.apple.com/archives/security-announce/2016/May/msg00005.html http://www.securitytracker.com/id/1035888 Common Vulnerability Exposure (CVE) ID: CVE-2016-1858 http://lists.apple.com/archives/security-announce/2016/May/msg00001.html Bugtraq: 20160530 WebKitGTK+ Security Advisory WSA-2016-0004 (Google Search) http://www.securityfocus.com/archive/1/538522/100/0/threaded http://packetstormsecurity.com/files/137229/WebKitGTK-Code-Execution-Denial-Of-Service-Memory-Corruption.html Common Vulnerability Exposure (CVE) ID: CVE-2016-1854 http://www.zerodayinitiative.com/advisories/ZDI-16-341 Common Vulnerability Exposure (CVE) ID: CVE-2016-1855 Common Vulnerability Exposure (CVE) ID: CVE-2016-1856 http://www.zerodayinitiative.com/advisories/ZDI-16-342 Common Vulnerability Exposure (CVE) ID: CVE-2016-1857 http://www.zerodayinitiative.com/advisories/ZDI-16-343 Common Vulnerability Exposure (CVE) ID: CVE-2016-1859 http://www.zerodayinitiative.com/advisories/ZDI-16-352
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.