RETIRED: Apple Safari Prior to 5.1 and 5.0.6 Multiple Security Vulnerabilities

Bugtraq ID:	48808
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 20 2011 12:00AM
Updated:	Jul 21 2011 10:40PM
Credit:	SkyLined of Google Chrome Security Team, Nikita Tarakanov and Alex Bazhanyuk of the CISS, Nikita Tarakanov and Alex Bazhanyuk of the CISS,J23 working with TippingPoint's Zero Day Initiative, wushi of team509 working with TippingPoint's Zero Day Initative a
Vulnerable:	WebKit Open Source Project WebKit 1.2.5 WebKit Open Source Project WebKit 1.2.3 WebKit Open Source Project WebKit 1.2.2 WebKit Open Source Project WebKit r82222 WebKit Open Source Project WebKit r77705 WebKit Open Source Project WebKit r52833 WebKit Open Source Project WebKit r52401 WebKit Open Source Project WebKit r51295 WebKit Open Source Project WebKit r38566 WebKit Open Source Project WebKit 1.2.X WebKit Open Source Project WebKit 1.2.2-1 WebKit Open Source Project WebKit 0 Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 5.0.5 for Windows Apple Safari 5.0.5 Apple Safari 5.0.4 for Windows Apple Safari 5.0.4 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1 Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4
Not Vulnerable:	Apple Safari 5.0.6 Apple Safari 5.1 for Windows Apple Safari 5.1 Apple Safari 5.0.6 for windows

RETIRED: Apple Safari Prior to 5.1 and 5.0.6 Multiple Security Vulnerabilities

Safari is prone to multiple security vulnerabilities that have been addressed in Apple security advisory APPLE-SA-2011-07-20-1. These issues affect versions prior to Safari 5.1 and 5.0.6 running on Apple Mac OS X, Windows 7, XP, and Vista.

Attackers can exploit these issues by enticing an unsuspecting user into visiting a malicious webpage. Successful attacks may result in information disclosure, remote code execution, denial of service, or other consequences.

This BID is being retired. The following individual records exist to better document the issues:

45008 WebKit (CVE-2010-3829) HTML 'Link' DNS Pre-Fetching Security Bypass Vulnerability
46703 WebKit CVE-2011-0164 Unspecified Memory Corruption Vulnerability
47668 libxslt 'generate-id()' Function Information Disclosure Vulnerability
48416 Apple Mac OS X ColorSync (CVE-2011-0200) Integer Overflow Vulnerability
48426 Apple Mac OS X CoreFoundation (CVE-2011-0201) Buffer Overflow Vulnerability
48427 Apple Mac OS X CoreGraphics (CVE-2011-0202) Integer Overflow Vulnerability
48429 Apple Mac OS X ICU (CVE-2011-0206) Buffer Overflow Vulnerability
48437 Apple Mac OS X TIFF Image Handling Heap Buffer Overflow Vulnerability
48820 WebKit Frameset Elements Memory Corruption Vulnerability
48823 WebKit Malformed XHTML Tags Use After Free Memory Corruption Vulnerability
48824 WebKit MathML Tags Use-After-Free Remote Code Execution Vulnerability
48825 WebKit Malformed 'TIFF' Image Use After Free Memory Corruption Vulnerability
48827 WebKit SVG Tags 'animVal' Property Use-After-Free Remote Code Execution Vulnerability
48828 Apple Safari CFNetwork Cross-Site Scripting Vulnerability
48831 Apple Safari CFNetwork NTLM authentication protocol Remote Code Execution Vulnerability
48832 Apple Safari 'libxml' (CVE-2011-0216) Remote Code Execution Vulnerability
48833 Apple Safari ImageIO TIFF Image Handling Heap Buffer Overflow Vulnerability
48837 Apple Safari CFNetwork Root Certificate Security Bypass Vulnerability
48839 Apple Safari 'AutoFill web forms' Feature Information Disclosure Vulnerability
48840 WebKit 'libxslt' Remote Code Execution Vulnerability
48841 Apple Safari Cross Domain Information Disclosure Vulnerability
48842 WebKit CVE-2011-0218 Memory Corruption Remote Code Execution Vulnerability
48843 WebKit CVE-2011-0221 Memory Corruption Remote Code Execution Vulnerability
48844 WebKit CVE-2011-0222 Memory Corruption Remote Code Execution Vulnerability
48845 WebKit CVE-2011-0225 Memory Corruption Remote Code Execution Vulnerability
48846 WebKit CVE-2011-0232 Memory Corruption Remote Code Execution Vulnerability
48847 WebKit CVE-2011-0233 Memory Corruption Remote Code Execution Vulnerability
48848 WebKit CVE-2011-0235 Memory Corruption Remote Code Execution Vulnerability
48849 WebKit CVE-2011-0237 Memory Corruption Remote Code Execution Vulnerability
48850 WebKit CVE-2011-0238 Memory Corruption Remote Code Execution Vulnerability
48851 WebKit CVE-2011-0253 Memory Corruption Remote Code Execution Vulnerability
48852 WebKit CVE-2011-0254 Memory Corruption Remote Code Execution Vulnerability
48853 WebKit CVE-2011-0255 Memory Corruption Remote Code Execution Vulnerability
48854 WebKit CVE-2011-1288 Memory Corruption Remote Code Execution Vulnerability
48855 WebKit CVE-2011-1453 Memory Corruption Remote Code Execution Vulnerability
48856 WebKit CVE-2011-1457 Memory Corruption Remote Code Execution Vulnerability
48857 WebKit CVE-2011-1462 Memory Corruption Remote Code Execution Vulnerability
48858 WebKit CVE-2011-1797 Memory Corruption Remote Code Execution Vulnerability
48859 WebKit Embedded URL Cross Domain Scripting Vulnerability
48860 WebKit URL Handling Information Disclosure Vulnerability

RETIRED: Apple Safari Prior to 5.1 and 5.0.6 Multiple Security Vulnerabilities

To exploit some of these issues, an attacker must entice a victim into visiting a malicious webpage or opening a malicious file.

RETIRED: Apple Safari Prior to 5.1 and 5.0.6 Multiple Security Vulnerabilities

Solution:
Vendor fixes are available. Please see the referenced advisory for details.