Summary
The host is installed with Apple Safari web browser and is prone to multiple vulnerabilities.
Impact
Successful exploitation will let the attackers to execute arbitrary HTML or web script, bypass certain security restrictions and or cause a denial of service.
Impact Level: Application
Solution
Upgrade to Apple Safari version 6.0.5 or later,
For updates refer to http://www.apple.com/support/downloads
Insight
Multiple flaws due to unspecified error in WebKit, XSS Auditor while handling iframe.
Affected
Apple Safari versions prior to 6.0.5 on Mac OS X
References
Severity
Classification
-
CVE CVE-2013-1009, CVE-2013-1012, CVE-2013-1013, CVE-2013-1023 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities
- Apple Safari 'setInterval()' Address Bar Spoofing Vulnerability (Win)
- APC PowerChute Business Edition Unspecified Cross Site Scripting Vulnerability
- Apple Safari Webkit Multiple Vulnerabilities - June13 (Mac OS X)
- Apple Safari 'javascript: URI' XSS Vulnerability - Sep09
- Avant Browser Address Bar Spoofing Vulnerability