RETIRED:Apple Safari Prior to 6.0 Multiple Security Vulnerabilities

BID:54669

Info

RETIRED:Apple Safari Prior to 6.0 Multiple Security Vulnerabilities

Bugtraq ID: 54669
Class: Unknown
CVE:
Remote: Yes
Local: No
Published: Jul 25 2012 12:00AM
Updated: Jul 26 2012 11:41PM
Credit: Masato Kinugawa, Aaron Sigel, Dan Poltawski, Apple Product Security, Dave Mandelin, Martin Barbella, Jose A. Vazquez, Skylined, miaubiz, Abhishek Arya, David Levin of the Chromium development community, Cris Neckar, Stephen Chenney, Slawomir Blazek, Julien
Vulnerable: Apple Safari 5.0.6
Apple Safari 5.1.7 for Windows
Apple Safari 5.1.7
Apple Safari 5.1.5 for Windows
Apple Safari 5.1.4 for Windows
Apple Safari 5.1.4
Apple Safari 5.1.1 for Windows
Apple Safari 5.1.1
Apple Safari 5.1 for Windows
Apple Safari 5.1
Apple Safari 5.0.6 for windows
Apple Safari 5.0.5 for Windows
Apple Safari 5.0.5
Apple Safari 5.0.4 for Windows
Apple Safari 5.0.4
Apple Safari 5.0.3 for Windows
Apple Safari 5.0.3
Apple Safari 5.0.2 for Windows
Apple Safari 5.0.2
Apple Safari 5.0.1 for Windows
Apple Safari 5.0.1
Apple Safari 5.0 for Windows
Apple Safari 5.0
Not Vulnerable:

Discussion

RETIRED:Apple Safari Prior to 6.0 Multiple Security Vulnerabilities

Safari is prone to multiple security vulnerabilities that have been addressed in Apple security advisory APPLE-SA-2012-07-25-1. These issues affect versions prior to Safari 6.0.

Successful attacks may allow the attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, bypass intended security protections, disclose sensitive information, insert arbitrary headers into an HTTP response, or a remote code execution. Other attacks are also possible.

NOTE: This BID is being retired because the following individual records have been created to better document issues previously mentioned in this BID:

54688 Apple Safari CVE-2012-0680 Security Bypass Vulnerability

54683 Apple Safari CVE-2012-0678 Cross-Site Scripting Vulnerability

54692 Apple Safari CVE-2012-0679 URL Handling Information Disclosure Vulnerability

54693 WebKit International Domain Name CVE-2012-3693 URI Spoofing Vulnerability

54695 WebKit CVE-2012-3695 Cross-Site Scripting Vulnerability

54680 WebKit Multiple Unspecified Remote Code Execution Vulnerabilities

54686 WebKit CVE-2012-3689 Cross Origin Information Disclosure Vulnerability

54687 WebKit CVE-2012-3691 Cross Origin Information Disclosure Vulnerability

54694 WebKit CVE-2012-3694 Information Disclosure Vulnerability

54697 WebKit CVE-2012-3697 Sandbox Security Bypass Weakness

54700 WebKit WebSockets CVE-2012-3696 HTTP Header Injection Vulnerability

54703 WebKit SVG Images CVE-2012-3650 Uninitialized Memory Information Disclosure Vulnerability

54696 WebKit Drag and Drop CVE-2012-3690 Cross-Origin Information Disclosure Vulnerability

Exploit / POC

RETIRED:Apple Safari Prior to 6.0 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

RETIRED:Apple Safari Prior to 6.0 Multiple Security Vulnerabilities

Solution:
Vendor fixes are available. Please see the referenced advisory for details.


Apple Safari 5.1.1

Apple Safari 5.0.2

Apple Safari 5.0 for Windows

Apple Safari 5.0.6 for windows

Apple Safari 5.1.1 for Windows

Apple Safari 5.1.4 for Windows

Apple Safari 5.1.7 for Windows

Apple Safari 5.0.4

Apple Safari 5.0.3

Apple Safari 5.0.1 for Windows

Apple Safari 5.1.5 for Windows

Apple Safari 5.1.4

Apple Safari 5.0.5 for Windows

Apple Safari 5.0.4 for Windows

Apple Safari 5.1.7

Apple Safari 5.0.3 for Windows

Apple Safari 5.0.5

Apple Safari 5.0.1

Apple Safari 5.0

Apple Safari 5.1

Apple Safari 5.0.2 for Windows

Apple Safari 5.1 for Windows

Apple Safari 5.0.6

References

RETIRED:Apple Safari Prior to 6.0 Multiple Security Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report