Apple Safari WebKit Memory Corruption and Cross Site Scripting Vulnerabilties

Two vulnerabilities have been identified in Apple Safari, which could be exploited by attackers to gain knowledge of sensitive information or compromise a vulnerable system.

1. An input validation error in WebKit when handling parent and top objects, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected site.

2. A memory corruption error in WebKit when handling numeric character references, which could be exploited by attackers to crash an affected browser or execute arbitrary code via a malicious web page.