RETIRED: Apple Safari Prior to 4.0.5 Multiple Security Vulnerabilities
BID:38671
Info
RETIRED: Apple Safari Prior to 4.0.5 Multiple Security Vulnerabilities
| Bugtraq ID: | 38671 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 11 2010 12:00AM |
| Updated: | Mar 12 2010 03:32PM |
| Credit: | Sebastien Renaud, Matthew 'j00ru' Jurczyk, Gus Mueller, Billy Rios, Robert Swiecki, wushi, wushi&Z, Apple |
| Vulnerable: |
Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Beta Apple Safari 4 |
| Not Vulnerable: |
Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 |
Discussion
RETIRED: Apple Safari Prior to 4.0.5 Multiple Security Vulnerabilities
Safari is prone to multiple security vulnerabilities that have been addressed in Apple security advisory APPLE-SA-2010-03-11-1. These issues affect versions prior to Safari 4.0.5 running on Apple Mac OS X, Windows 7, XP and Vista.
NOTE: This BID is being retired because the following individual records have been created to better document issues previously mentioned in this BID:
38674 Apple Safari Prior to 4.0.5 Integer Overflow Vulnerability
35451 LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability
38676 Apple Safari BMP Image Uninitialized Memory Information Disclosure Vulnerability
38677 Apple Safari TIFF Image Uninitialized Memory Information Disclosure Vulnerability
38673 Apple Safari ImageIO TIFF Image Remote Code Execution Vulnerability
38675 Apple Safari Prior to 4.0.5 Configuration Bypass Weakness
38683 Apple Safari URL Schemes Handling Remote Code Execution Vulnerability
38684 WebKit CSS 'format()' Arguments Memory Corruption Vulnerability
38687 WebKit Object Element Fallback Memory Corruption Vulnerability
38688 WebKit XML Document Parsing Memory Corruption Vulnerability
38689 WebKit Right-to-Left Displayed Text Handling Memory Corruption Vulnerability
38685 WebKit Nested HTML Tags Use-After-Free Error Remote Code Execution Vulnerability
38692 WebKit Cross-Origin Stylesheet Request Information Disclosure Vulnerability
38686 WebKit HTML Elements Callback Use-After-Free Error Remote Code Execution Vulnerability
38690 WebKit CSS Display Use-After-Free Error Remote Code Execution Vulnerability
38691 WebKit HTML Image Element Handling Memory Corruption Vulnerability
Safari is prone to multiple security vulnerabilities that have been addressed in Apple security advisory APPLE-SA-2010-03-11-1. These issues affect versions prior to Safari 4.0.5 running on Apple Mac OS X, Windows 7, XP and Vista.
NOTE: This BID is being retired because the following individual records have been created to better document issues previously mentioned in this BID:
38674 Apple Safari Prior to 4.0.5 Integer Overflow Vulnerability
35451 LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability
38676 Apple Safari BMP Image Uninitialized Memory Information Disclosure Vulnerability
38677 Apple Safari TIFF Image Uninitialized Memory Information Disclosure Vulnerability
38673 Apple Safari ImageIO TIFF Image Remote Code Execution Vulnerability
38675 Apple Safari Prior to 4.0.5 Configuration Bypass Weakness
38683 Apple Safari URL Schemes Handling Remote Code Execution Vulnerability
38684 WebKit CSS 'format()' Arguments Memory Corruption Vulnerability
38687 WebKit Object Element Fallback Memory Corruption Vulnerability
38688 WebKit XML Document Parsing Memory Corruption Vulnerability
38689 WebKit Right-to-Left Displayed Text Handling Memory Corruption Vulnerability
38685 WebKit Nested HTML Tags Use-After-Free Error Remote Code Execution Vulnerability
38692 WebKit Cross-Origin Stylesheet Request Information Disclosure Vulnerability
38686 WebKit HTML Elements Callback Use-After-Free Error Remote Code Execution Vulnerability
38690 WebKit CSS Display Use-After-Free Error Remote Code Execution Vulnerability
38691 WebKit HTML Image Element Handling Memory Corruption Vulnerability
Exploit / POC
RETIRED: Apple Safari Prior to 4.0.5 Multiple Security Vulnerabilities
To exploit some of these issues, an attacker must entice a victim into visiting a malicious page or opening a malicious file.
To exploit some of these issues, an attacker must entice a victim into visiting a malicious page or opening a malicious file.
Solution / Fix
RETIRED: Apple Safari Prior to 4.0.5 Multiple Security Vulnerabilities
Solution:
Vendor fixes are available. Please see the referenced advisory for details.
Apple Safari 4
Apple Safari 4 for Windows
Apple Safari 4.0.1
Apple Safari 4.0.2 for Windows
Apple Safari 4.0.2
Apple Safari 4.0.3 for Windows
Apple Safari 4.0.3
Apple Safari 4.0.4
Apple Safari 4.0.4 for Windows
Solution:
Vendor fixes are available. Please see the referenced advisory for details.
Apple Safari 4
-
Apple Safari4.0.5Leopard.dmg
Safari for Mac OS X v10.5.7
http://www.apple.com/safari/download/ -
Apple Safari4.0.5SnowLeopard.dmg
Safari for Mac OS X v10.6.1 to v10.6.3
http://www.apple.com/safari/download/ -
Apple Safari4.0.5Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
Apple Safari 4 for Windows
-
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/
Apple Safari 4.0.1
-
Apple Safari4.0.5Leopard.dmg
Safari for Mac OS X v10.5.7
http://www.apple.com/safari/download/ -
Apple Safari4.0.5SnowLeopard.dmg
Safari for Mac OS X v10.6.1 to v10.6.3
http://www.apple.com/safari/download/ -
Apple Safari4.0.5Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
Apple Safari 4.0.2 for Windows
-
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/
Apple Safari 4.0.2
-
Apple Safari4.0.5Leopard.dmg
Safari for Mac OS X v10.5.7
http://www.apple.com/safari/download/ -
Apple Safari4.0.5SnowLeopard.dmg
Safari for Mac OS X v10.6.1 to v10.6.3
http://www.apple.com/safari/download/ -
Apple Safari4.0.5Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
Apple Safari 4.0.3 for Windows
-
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/
Apple Safari 4.0.3
-
Apple Safari4.0.5Leopard.dmg
Safari for Mac OS X v10.5.7
http://www.apple.com/safari/download/ -
Apple Safari4.0.5SnowLeopard.dmg
Safari for Mac OS X v10.6.1 to v10.6.3
http://www.apple.com/safari/download/ -
Apple Safari4.0.5Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
Apple Safari 4.0.4
-
Apple Safari4.0.5Leopard.dmg
Safari for Mac OS X v10.5.7
http://www.apple.com/safari/download/ -
Apple Safari4.0.5SnowLeopard.dmg
Safari for Mac OS X v10.6.1 to v10.6.3
http://www.apple.com/safari/download/ -
Apple Safari4.0.5Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
Apple Safari 4.0.4 for Windows
-
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-Safari_Setup.exe
Safari for Windows 7, Vista or XP from the Microsoft Choice Screen
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2010-03-11-1-SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/
References
RETIRED: Apple Safari Prior to 4.0.5 Multiple Security Vulnerabilities
References:
References:
- Apple Safari Homepage (Apple)