Apple Safari Use-After-Free and Multiple Memory Corruption Vulnerabilities

Last Update Date: 27 Feb 2014 10:41 Release Date: 27 Feb 2014 3099 Views

RISK: High Risk

TYPE: Clients - Browsers

Multiple vulnerabilities have been reported in Apple Safari, which can be exploited by malicious people to compromise a user's system.

A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a memory corruption flaw in WebKit and execute arbitrary code on the target system. The code will run with the privileges of the target user.

Impact

Remote Code Execution

System / Technologies affected

Apple Safari versions prior to 6.1.2 and 7.0.2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 6.1.2 or 7.0.2.

Vulnerability Identifier

CVE-2014-1268
CVE-2014-1269
CVE-2014-1270

Source

Secunia
SecurityTracker