ID de Prueba:	1.3.6.1.4.1.25623.1.0.805675
Categoría:	General
Título:	Apple Safari Multiple Vulnerabilities-01 July15 (Mac OS X)
Resumen:	This host is installed with Apple Safari; and is prone to multiple vulnerabilities.
Descripción:	Summary: This host is installed with Apple Safari and is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An error in WebKit that does not properly restrict rename operations on WebSQL tables. - An error in the PDF functionality in WebKit. - An error in SQLite authorizer in the Storage functionality in WebKit that does not properly restrict access to SQL functions. - An error in Page Loading functionality in WebKit that does not properly consider redirects during decisions about sending an Origin header. Vulnerability Impact: Successful exploitation will allow remote attackers to access an arbitrary web site's database, inject arbitrary web script or HTML, execute arbitrary code or cause a denial of service and bypass CSRF protection mechanisms. Affected Software/OS: Apple Safari versions before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7 Solution: Upgrade to Apple Safari version 6.2.7 or 7.1.7 or 8.0.7 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	BugTraq ID: 75492 BugTraq ID: 75494 Common Vulnerability Exposure (CVE) ID: CVE-2015-3727 http://lists.apple.com/archives/security-announce/2015/Jun/msg00001.html http://lists.apple.com/archives/security-announce/2015/Jun/msg00004.html http://www.securityfocus.com/bid/75492 http://www.securitytracker.com/id/1032754 SuSE Security Announcement: openSUSE-SU-2016:0915 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-03/msg00132.html http://www.ubuntu.com/usn/USN-2937-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-3660 http://www.securityfocus.com/bid/75494 SuSE Security Announcement: openSUSE-SU-2016:0761 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-03/msg00054.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3659 Common Vulnerability Exposure (CVE) ID: CVE-2015-3658
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.