Test ID:	1.3.6.1.4.1.25623.1.0.900912
Category:	General
Title:	Apple Safari Multiple Vulnerabilities (Aug 2009)
Summary:	Apple Safari Web Browser is prone to multiple vulnerabilities.
Description:	Summary: Apple Safari Web Browser is prone to multiple vulnerabilities. Vulnerability Insight: - An error in WebKit while parsing malicious floating point numbers can be exploited to cause buffer overflows. - An unspecified error in the Top Sites feature can be exploited to place a malicious web site in the Top Sites view when a user visits a specially crafted web page. - Incomplete blacklist vulnerability in WebKit can be exploited via unspecified homoglyphs. - An error in WebKit in the handling of the 'pluginspage' attribute of the 'embed' element can be exploited to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document. Vulnerability Impact: Successful exploitation will let the attacker execute arbitrary code, bypass security restrictions, gain sensitive information and can cause Denial of Service. Affected Software/OS: Apple Safari version prior to 4.0.3. Solution: Upgrade to Safari version 4.0.3. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2195 http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html BugTraq ID: 36023 http://www.securityfocus.com/bid/36023 http://www.securitytracker.com/id?1022717 http://secunia.com/advisories/43068 SuSE Security Announcement: SUSE-SR:2011:002 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.vupen.com/english/advisories/2011/0212 Common Vulnerability Exposure (CVE) ID: CVE-2009-2196 BugTraq ID: 36022 http://www.securityfocus.com/bid/36022 http://www.securitytracker.com/id?1022718 Common Vulnerability Exposure (CVE) ID: CVE-2009-2199 http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html BugTraq ID: 36026 http://www.securityfocus.com/bid/36026 http://www.securitytracker.com/id?1022719 http://secunia.com/advisories/36677 Common Vulnerability Exposure (CVE) ID: CVE-2009-2200 BugTraq ID: 36024 http://www.securityfocus.com/bid/36024 http://www.securitytracker.com/id?1022720
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.