Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable8324.PRM
HistoryJun 08, 2014 - 12:00 a.m.

Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities

2014-06-0800:00:00
Tenable
www.tenable.com
21

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.011

Percentile

84.2%

JSON

The remote host has Safari installed that is older than 6.1.4 or 7.0.4, and is thus unpatched for the following WebKit vulnerabilities :

  • Multiple memory corruption issues within WebKit, which were addressed through improved memory handling (CVE-2014-1325, CVE-2014-1340, CVE-2014-1362, CVE-2014-1363, CVE-2014-1364, CVE-2014-1365, CVE-2014-1366, CVE-2014-1367, CVE-2014-1368, CVE-2014-1382)
  • URL spoofing vulnerability due to improper encoding of domain names (CVE-2014-1345)
  • Information disclosure vulnerability wherein URLs dragged between windows could allow disclosure of local file content (CVE-2014-1369)
Binary data 8324.prm
VendorProductVersionCPE
applesafaricpe:/a:apple:safari

Related

openvas 1
nessus 4
securityvulns 8
cve 12
prion 12
nvd 12
cvelist 12
ubuntucve 11
debiancve 1
openvas
openvas
Apple Safari Multiple Memory Corruption Vulnerabilities-01 (Aug 2014) - Mac OS X
2014-08-25 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 6.1.5 / 7.0.5 Multiple Vulnerabilities
2014-06-30 00:00:00
Apple TV < 6.1.2 Multiple Vulnerabilities
2014-07-06 00:00:00
Apple iTunes < 12.0.1 Multiple Vulnerabilities (uncredentialed check)
2014-10-21 00:00:00
securityvulns
securityvulns
APPLE-SA-2014-06-30-1 Safari 6.1.5 and Safari 7.0.5
2014-08-04 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2015-02-02 00:00:00
Apple TV multiple security vulnerabilities
2014-08-04 00:00:00
cve
cve
CVE-2014-1325
2014-07-01 10:17:25
CVE-2014-1340
2014-07-01 10:17:25
CVE-2014-1363
2014-07-01 10:17:26
prion
prion
Memory corruption
2014-07-01 10:17:00
Memory corruption
2014-07-01 10:17:00
Memory corruption
2014-07-01 10:17:00
nvd
nvd
CVE-2014-1363
2014-07-01 10:17:26
CVE-2014-1340
2014-07-01 10:17:25
CVE-2014-1325
2014-07-01 10:17:25
cvelist
cvelist
CVE-2014-1340
2014-07-01 10:00:00
CVE-2014-1369
2014-07-01 10:00:00
CVE-2014-1325
2014-07-01 10:00:00
ubuntucve
ubuntucve
CVE-2014-1340
2014-07-01 00:00:00
CVE-2014-1325
2014-07-01 00:00:00
CVE-2014-1363
2014-07-01 00:00:00
debiancve
debiancve
CVE-2014-1345
2014-07-01 10:17:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.011

Percentile

84.2%

JSON
Related for 8324.PRM
openvas1nessus4securityvulns8cve12prion12nvd12cvelist12ubuntucve11debiancve1