CERT-In Advisory
CIAD-2017-0049
Multiple vulnerabilities in Apple Safari
Original Issue Date: November 03, 2017
Severity Rating: High
Software Affected
- Apple Safari versions prior to 11.0.1
Overview
Multiple vulnerabilities have been reported in Apple Safari which could allow attacker to spoof browser address bar and execute arbitrary code on the affected system.
Description
These vulnerabilities are caused due to multiple memory corruption issues and improper state management in various components within Safari.
Successful exploitation of these vulnerabilities could allow an attacker to spoof browser address bar and execute arbitrary code on the affected system.
Solution
Apply appropriate security updates as mentioned in the
Apple Security Advisory HT208223
Vendor Information
Apple
https://support.apple.com/en-us/HT208223
References
Apple
https://support.apple.com/en-us/HT208223
Security Tracker
http://www.securitytracker.com/id/1039384
CVE Name
CVE-2017-13790
CVE-2017-13789
CVE-2017-13784
CVE-2017-13785
CVE-2017-13783
CVE-2017-13788
CVE-2017-13795
CVE-2017-13802
CVE-2017-13792
CVE-2017-13791
CVE-2017-13798
CVE-2017-13796
CVE-2017-13793
CVE-2017-13794
CVE-2017-13803
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|