CERT-In Advisory
CIAD-2020-0005
Multiple Vulnerabilities in Apple Safari
Original Issue Date: January 31, 2020
Severity Rating: High
Software Affected
- Apple Safari version prior to 13.0.5
Overview
Multiple vulnerabilities have been reported in Apple Safari which could be exploited by a remote attacker to execute arbitrary code, spoof web content, perform cross site scripting attacks, cause denial of service conditions or access sensitive information on a targeted system.
Description
These vulnerabilities exist in Apple Safari due to various issues such as inconsistent user interface, improper UI handling, improper state management and improper memory handling. A remote attacker could exploit these vulnerabilities by persuading a user to visit a specially crafted website.
Successful exploitation of these vulnerabilities could allow the attacker execute arbitrary code, spoof web content, perform cross site scripting attacks, cause denial of service conditions or access sensitive information on the targeted system.
Solution
Apply appropriate software updates as mentioned in the
Apple Security Updates.
Vendor Information
Apple
https://support.apple.com/en-is/HT210922
References
Apple
https://support.apple.com/en-is/HT210922
CVE Name
CVE-2020-3833
CVE-2020-3841
CVE-2020-3867
CVE-2020-3825
CVE-2020-3868
CVE-2020-3862
CVE-2020-3865
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|