Skip to main content

Apple Safari WebKit Multiple Vulnerabilities

Last Update Date: 19 Apr 2011 Release Date: 15 Apr 2011 5621 Views

RISK: High Risk

TYPE: Clients - Browsers

TYPE: Browsers

Two vulnerabilities have been identified in Apple Safari, which could be exploited by remote attackers to compromise a vulnerable system.

  1. A use-after-free error in WebKit when handling text nodes, which could be exploited to execute arbitrary code via a malicious web page.
  2. An integer overflow error in WebKit when handling certain style data, which could be exploited by remote attackers to execute arbitrary code via a specially crafted web page.

Impact

  • Remote Code Execution

System / Technologies affected

  • Apple Safari version 5.0.4 and prior

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Upgrade to Apple Safari version 5.0.5

Vulnerability Identifier


Source


Related Link