Apple Safari CFNetwork NTLM authentication protocol Remote Code Execution Vulnerability

Bugtraq ID:	48831
Class:	Unknown
CVE:	CVE-2010-1383
Remote:	Yes
Local:	No
Published:	Jul 20 2011 12:00AM
Updated:	Jul 20 2011 12:00AM
Credit:	Takehiro Takahashi of IBM X-Force Research
Vulnerable:	Apple Safari 4.1.2 for Windows Apple Safari 4.0.5 for Windows Apple Safari 4.0.5 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 5.0.5 for Windows Apple Safari 5.0.5 Apple Safari 5.0.4 for Windows Apple Safari 5.0.4 Apple Safari 5.0.3 for Windows Apple Safari 5.0.3 Apple Safari 5.0.2 for Windows Apple Safari 5.0.2 Apple Safari 5.0.1 for Windows Apple Safari 5.0.1 Apple Safari 5.0 for Windows Apple Safari 5.0 Apple Safari 4.1.3 for Windows Apple Safari 4.1.3 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4.0 Beta Apple Safari 4.0
Not Vulnerable:	Apple Safari 5.0.6 Apple Safari 5.1 for Windows Apple Safari 5.1 Apple Safari 5.0.6 for windows

Apple Safari CFNetwork NTLM authentication protocol Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Safari CFNetwork NTLM authentication protocol Remote Code Execution Vulnerability

Solution:
Vendor fixes are available. Please see the referenced advisory for details.

Apple Safari CFNetwork NTLM authentication protocol Remote Code Execution Vulnerability

References:

• Apple Safari Homepage (Apple)