Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
|
|
|
|
|
|
|
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
|
|
|
|
Become a Partner and License Our Database or Notification Service
|
|
|
|
|
|
|
|
|
|
|
|
|
Apple Safari Bugs Let Remote Users Conduct Cross-Site Scripting Attacks, Execute Arbitrary Code, and Bypass Cookie Restrictions
|
|
SecurityTracker Alert ID: 1026178 |
|
SecurityTracker URL: http://securitytracker.com/id/1026178
|
|
CVE Reference:
CVE-2011-3229, CVE-2011-3230, CVE-2011-3231, CVE-2011-3242, CVE-2011-3243
(Links to External Site)
|
Date: Oct 12 2011
|
Impact:
Disclosure of authentication information, Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 5.1.1
|
Description:
Several vulnerabilities were reported in Apple Safari. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can conduct cross-site scripting attacks. A remote user can bypass cookie setting restrictions.
A remote user can create specially crafted HTML that, when loaded by the target user, will cause arbitrary Javascript to be executed in the context of installed Safari extensions [CVE-2011-3229]. Aaron Sigel of vtty.com reported this vulnerability.
A remote user can create specially crafted HTML that, when loaded by the target user, will exploit a flaw in the handling of file://URLs and execute arbitrary code on the target user's system [CVE-2011-3230]. Windows-based systems are not affected. Aaron Sigel of vtty.com reported this vulnerability.
A remote user can create specially crafted HTML that, when loaded by the target user, will access uninitialized memory when processing SSL certificates and execute arbitrary code [CVE-2011-3231]. Windows-based systems are not affected. Mac OS X Lion is not affected. Jason Broccardo of Fermi National Accelerator Laboratory reported this vulnerability.
A remote user can set cookies on the target user's browser when the browser is in Private Browsing mode and the browser is configured to block cookies [CVE-2011-3242]. Windows-based systems are not affected. John Adamczyk reported this vulnerability.
A remote user can create specially crafted HTML that, when loaded by the target user, will bypass cross-origin restrictions and permit cross-site scripting attacks [CVE-2011-3243]. Sergey Glazunov reported this vulnerability.
|
Impact:
A remote user can create HTML that, when loaded by the target user, will execute arbitrary code on the target user's system.
A remote user can access the target user's cookies (including authentication cookies), if any, associated with an arbitrary site, access data recently submitted by the target user via web form to the site, or take actions on the site acting as the target user.
A remote user can set cookies on the target user's browser.
|
Solution:
The vendor has issued a fix (5.1.1), available via the Apple Software Update application, or Apple's Safari download site at:
http://www.apple.com/safari/download/
Safari for OS X Lion v10.7.2
The download file is named: Safari5.1.1Lion.dmg
Its SHA-1 digest is: 368113397d35475a0a4d0b0dbf3b31f543cfb4c5
Safari for Mac OS X v10.6.8
The download file is named: Safari5.1.1SnowLeopard.dmg
Its SHA-1 digest is: 4c588d86032ab24984b721354748f028b559fb37
Safari for Windows 7, Vista or XP
The download file is named: SafariSetup.exe
Its SHA-1 digest is: 5a2d3e0c0e601938f1d64d517e6a8199cd563d10
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
The download file is named: Safari_Setup.exe
Its SHA-1 digest is: f0094f19b7a6b0a96a4fe6407b0037223ae44b15
Safari+QuickTime for Windows 7, Vista or XP
The file is named: SafariQuickTimeSetup.exe
Its SHA-1 digest is: 3dbfe52e5be6409d0ad1fcb22e747963e10db218
The vendor's advisory is available at:
http://support.apple.com/kb/HT5000
|
Vendor URL: support.apple.com/kb/HT5000 (Links to External Site)
|
Cause:
Access control error, Input validation error
|
Underlying OS:
UNIX (OS X), Windows (7), Windows (Vista), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
Go to the Top of This SecurityTracker Archive Page
|
