Lucene search
Tenable8642.PRMHistoryMar 04, 2015 - 12:00 a.m.
Safari < 6.2.1 / 7.1.1 / 8.0.1 Multiple Vulnerabilities
2015-03-0400:00:00
Tenable
www.tenable.com
10
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.026 Low
EPSS
Percentile
90.4%
According to its banner, the remote Safari browser is missing a security update to Webkit. Safari is bundled with Apple WebKit. Apple WebKit is affected by the following vulnerabilities :
- There is a ‘use-after-free’ vulnerability which can allow remote attackers to execute arbitrary code through crafted page objects within HTML. (CVE-2014-4459)
- There is a policy bypass flaw which can allow remote attackers to bypass the ‘Same Origin Policy’ via Cascading Style Sheets. (CVE-2014-4465)
Binary data 8642.prmRelated
prion
prion
Design/Logic Flaw
2014-11-18 11:59:00
Design/Logic Flaw
2014-12-10 21:59:00
nvd
nvd
CVE-2014-4459
2014-11-18 11:59:06
CVE-2014-4465
2014-12-10 21:59:03
cvelist
cvelist
CVE-2014-4459
2014-11-18 11:00:00
CVE-2014-4465
2014-12-10 21:00:00
cve
cve
CVE-2014-4459
2014-11-18 11:59:06
CVE-2014-4465
2014-12-10 21:59:03
ubuntucve
ubuntucve
CVE-2014-4459
2014-11-18 00:00:00
CVE-2014-4465
2014-12-10 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities-06 (Oct 2015)
2015-10-29 00:00:00
Apple Safari 'Webkit' Multiple Vulnerabilities-01 (Dec 2014) - Mac OS X
2014-12-16 00:00:00
securityvulns
securityvulns
Apple Mac OS X multiple security vulnerabilities
2014-11-24 00:00:00
APPLE-SA-2014-11-17-2 OS X Yosemite 10.10.1
2014-11-24 00:00:00
Apple Safari / Webkit multiple security vulnerabilities
2014-12-21 00:00:00
nessus
nessus
Mac OS X < 10.10.1 Multiple Vulnerabilities
2015-03-04 00:00:00
Mac OS X 10.10.x < 10.10.1 Multiple Vulnerabilities
2014-11-18 00:00:00
Mac OS X : Apple Safari < 6.2.2 / 7.1.2 / 8.0.2 Multiple Vulnerabilities
2014-12-16 00:00:00
kaspersky
kaspersky
KLA10620 Multiple vulnerabilities in Apple iTunes
2015-06-30 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.026 Low
EPSS
Percentile
90.4%
Related for 8642.PRM