Apple Safari CVE-2013-5227 Multiple Cross Origin Information Disclosure Vulnerabilities
BID:64355
Info
Apple Safari CVE-2013-5227 Multiple Cross Origin Information Disclosure Vulnerabilities
| Bugtraq ID: | 64355 |
| Class: | Origin Validation Error |
| CVE: |
CVE-2013-5227 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2013 12:00AM |
| Updated: | Sep 17 2014 07:19PM |
| Credit: | Niklas Malmgren of Klarna AB |
| Vulnerable: |
Apple Safari 5.0.6 Apple Safari 4.0.5 Apple Safari 4.0.4 Apple Safari 4.0.3 Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 Apple Safari 3.1.2 Apple Safari 3.1.1 Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 1.3.2 Apple Safari 1.3.1 Apple Safari 1.3 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 Apple Safari 1.1 Apple Safari 1.0 Apple Safari 5.1.7 Apple Safari 5.1.4 Apple Safari 5.1.1 Apple Safari 5.1 Apple Safari 5.0.5 Apple Safari 5.0.4 Apple Safari 5.0.3 Apple Safari 5.0.2 Apple Safari 5.0.1 Apple Safari 5.0 Apple Safari 4.1.3 Apple Safari 4.1.2 Apple Safari 4.1.1 Apple Safari 4.1 Apple Safari 4.0 Beta Apple Safari 4.0 Apple Safari 4 Beta Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 Apple Safari 3 Beta Apple Safari 3 Apple iPod Touch 0 Apple iPhone 0 Apple iPad 0 Apple iOS 4.2.1 Apple iOS 4.0.2 Apple iOS 4.0.1 Apple iOS 3.2.2 Apple iOS 3.2.1 Apple iOS 5.1.1 Apple iOS 5.1 Apple iOS 5.0.1 Apple iOS 5 Apple iOS 4.3.5 Apple iOS 4.3.4 Apple iOS 4.3.3 Apple iOS 4.3.2 Apple iOS 4.3.1 Apple iOS 4.3 Apple iOS 4.2.9 Apple iOS 4.2.8 Apple iOS 4.2.7 Apple iOS 4.2.6 Apple iOS 4.2.5 Apple iOS 4.2.10 Apple iOS 4.2 beta Apple iOS 4.2 Apple iOS 4.1 Apple iOS 4 Apple iOS 3.2 Apple iOS 3.1 Apple iOS 3.0 Apple iOS 2.1 Apple iOS 2.0 |
| Not Vulnerable: | |
Discussion
Apple Safari CVE-2013-5227 Multiple Cross Origin Information Disclosure Vulnerabilities
Apple Safari is prone to multiple remote information-disclosure vulnerabilities.
Successful exploits may allow attackers to gain access to sensitive information. Information obtained may lead to further attacks.
Versions prior to Apple Safari 6.1.1 and 7.0.1 are vulnerable.
Apple Safari is prone to multiple remote information-disclosure vulnerabilities.
Successful exploits may allow attackers to gain access to sensitive information. Information obtained may lead to further attacks.
Versions prior to Apple Safari 6.1.1 and 7.0.1 are vulnerable.
Exploit / POC
Apple Safari CVE-2013-5227 Multiple Cross Origin Information Disclosure Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple Safari CVE-2013-5227 Multiple Cross Origin Information Disclosure Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Apple Safari CVE-2013-5227 Multiple Cross Origin Information Disclosure Vulnerabilities
References:
References:
- Apple Homepage (Apple)