Apple » Safari : Security Vulnerabilities (CVSS score between 5 and 5.99)

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-3748	362		DoS Exec Code	2012-11-03	2013-03-01	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving JavaScript arrays.
2	CVE-2012-3693				2012-07-25	2012-09-21	5.0	None	Remote	Low	Not required	None	Partial	None
Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, by leveraging the availability of IDN support and Unicode fonts to construct unspecified homoglyphs.
3	CVE-2012-3691	20		Bypass	2012-07-25	2012-09-21	5.8	None	Remote	Medium	Not required	Partial	Partial	None
WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
4	CVE-2012-3689	20		Bypass	2012-07-25	2012-07-30	5.8	None	Remote	Medium	Not required	Partial	Partial	None
WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attackers to bypass the Same Origin Policy via a crafted web site.
5	CVE-2012-0680	264		Bypass	2012-07-25	2013-04-01	5.0	None	Remote	Low	Not required	None	Partial	None
Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows remote attackers to bypass authentication by leveraging an unattended workstation.
6	CVE-2012-0676	20			2012-05-10	2013-01-03	5.0	None	Remote	Low	Not required	None	Partial	None
WebKit in Apple Safari before 5.1.7 does not properly track state information during the processing of form input, which allows remote attackers to fill in form fields on the pages of arbitrary web sites via unspecified vectors.
7	CVE-2012-0647	200		+Info	2012-03-12	2012-03-13	5.0	None	Remote	Low	Not required	Partial	None	None
WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
8	CVE-2012-0640	200		+Info	2012-03-12	2012-03-13	5.0	None	Remote	Low	Not required	Partial	None	None
WebKit in Apple Safari before 5.1.4 does not properly implement "From third parties and advertisers" cookie blocking, which makes it easier for remote web servers to track users via a cookie.
9	CVE-2011-4692	264			2011-12-07	2011-12-08	5.0	None	Remote	Low	Not required	Partial	None	None
WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi.
10	CVE-2011-3242	200		+Info	2011-10-14	2011-10-20	5.0	None	Remote	Low	Not required	Partial	None	None
The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.
11	CVE-2011-0219	264		Bypass	2011-07-21	2011-07-22	5.8	None	Remote	Medium	Not required	None	Partial	Partial
Apple Safari before 5.0.6 allows remote attackers to bypass the Same Origin Policy, and modify the rendering of text from arbitrary web sites, via a Java applet that loads fonts.
12	CVE-2011-0214	310		Bypass	2011-07-21	2011-07-22	5.0	None	Remote	Low	Not required	None	Partial	None
CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system root certificate, which allows remote web servers to bypass intended SSL restrictions via a certificate signed by a blacklisted certification authority.
13	CVE-2011-0166	264		Bypass +Info	2011-03-11	2011-10-20	5.8	None	Remote	Medium	Not required	Partial	Partial	None
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might overlap CVE-2011-0778.
14	CVE-2011-0160	20			2011-03-11	2011-03-30	5.0	None	Remote	Low	Not required	Partial	None	None
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle redirects in conjunction with HTTP Basic Authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header.
15	CVE-2010-5070	264		+Info	2011-12-07	2012-03-07	5.0	None	Remote	Low	Not required	Partial	None	None
The JavaScript implementation in Apple Safari 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method, a different vulnerability than CVE-2010-2264. NOTE: this may overlap CVE-2010-5073.
16	CVE-2010-3813	264		Bypass	2010-11-22	2011-07-18	5.8	None	Remote	Medium	Not required	Partial	Partial	None
The WebCore::HTMLLinkElement::process function in WebCore/html/HTMLLinkElement.cpp in WebKit, as used in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4; webkitgtk before 1.2.6; and possibly other products does not verify whether DNS prefetching is enabled when processing an HTML LINK element, which allows remote attackers to bypass intended access restrictions, as demonstrated by an HTML e-mail message that uses a LINK element for X-Confirm-Reading-To functionality.
17	CVE-2010-3804	310			2010-11-22	2011-07-18	5.0	None	Remote	Low	Not required	Partial	None	None
The JavaScript implementation in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, uses a weak algorithm for generating values of random numbers, which makes it easier for remote attackers to track a user by predicting a value, a related issue to CVE-2008-5913 and CVE-2010-3171.
18	CVE-2010-1413	310		+Info	2010-06-11	2011-02-17	5.0	None	Remote	Low	Not required	Partial	None	None
WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, sends NTLM credentials in cleartext in unspecified circumstances, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.
19	CVE-2010-1409				2010-06-11	2011-03-17	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Incomplete blacklist vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to trigger disclosure of data over IRC via vectors involving an IRC service port.
20	CVE-2010-1099	264		Overflow Bypass	2010-03-24	2010-04-02	5.0	None	Remote	Low	Not required	None	Partial	None
Integer overflow in Apple Safari allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25.
21	CVE-2010-1029	399	2	DoS Exec Code	2010-03-19	2012-01-26	5.0	None	Remote	Low	Not required	None	None	Partial
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.
22	CVE-2010-0925			DoS	2010-03-03	2010-03-04	5.0	None	Remote	Low	Not required	None	None	Partial
cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in the SRC attribute of a (1) IMG or (2) IFRAME element.
23	CVE-2010-0924			DoS	2010-03-03	2010-03-04	5.0	None	Remote	Low	Not required	None	None	Partial
cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in the BACKGROUND attribute of a BODY element.
24	CVE-2010-0314				2010-01-14	2011-03-17	5.0	None	Remote	Low	Not required	Partial	None	None
Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value.
25	CVE-2009-3272	399	1	DoS	2009-09-21	2011-02-17	5.0	None	Remote	Low	Not required	None	None	Partial
Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.
26	CVE-2009-2841				2009-11-13	2011-03-17	5.0	None	Remote	Low	Not required	Partial	None	None
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.
27	CVE-2009-2421	20		DoS Exec Code	2009-07-09	2009-07-22	5.0	None	Remote	Low	Not required	None	None	Partial
The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a "high-bit character" in a URL fragment for an unspecified protocol.
28	CVE-2009-2420	20		DoS	2009-07-09	2009-07-22	5.8	None	Remote	Medium	Not required	Partial	None	Partial
Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703.
29	CVE-2009-2199				2009-08-12	2012-03-30	5.8	None	Remote	Medium	Not required	None	Partial	Partial
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs.
30	CVE-2009-2196				2009-08-12	2009-08-18	5.0	None	Remote	Low	Not required	None	Partial	None
Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors.
31	CVE-2009-2072	287			2009-06-15	2009-06-23	5.4	None	Local Network	Medium	Not required	Partial	Partial	Partial
Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server.
32	CVE-2009-1706	200		+Info	2009-06-10	2009-06-19	5.0	None	Remote	Low	Not required	Partial	None	None
The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie.
33	CVE-2009-1696	310			2009-06-10	2011-02-17	5.0	None	Remote	Low	Not required	Partial	None	None
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.
34	CVE-2009-1694				2009-06-10	2011-02-17	5.8	None	Remote	Medium	Not required	Partial	Partial	None
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site image capture issue."
35	CVE-2009-1693				2009-06-10	2011-02-17	5.8	None	Remote	Medium	Not required	Partial	Partial	None
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."
36	CVE-2009-0744	20		DoS	2009-02-27	2010-08-21	5.0	None	Remote	Low	Not required	None	None	Partial
Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a feeds: URI beginning with a (1) % (percent), (2) { (open curly bracket), (3) } (close curly bracket), (4) ^ (caret), (5) ` (backquote), or (6) \| (pipe) character, followed by an & (ampersand) character.
37	CVE-2008-7296	264			2011-08-09	2012-08-02	5.8	None	Remote	Medium	Not required	None	Partial	Partial
Apple Safari cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a "cookie forcing" issue.
38	CVE-2008-5821	399	1	DoS	2009-01-02	2009-01-10	5.0	None	Remote	Low	Not required	None	None	Partial
Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and browser crash) via a long ALINK attribute in a BODY element in an HTML document.
39	CVE-2008-4232				2008-11-25	2008-12-03	5.0	None	Remote	Low	Not required	None	Partial	None
Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document.
40	CVE-2008-3950	189		DoS	2008-09-16	2009-01-29	5.0	None	Remote	Low	Not required	None	None	Partial
Off-by-one error in the _web_drawInRect:withFont:ellipsis:alignment:measureOnly function in WebKit in Safari in Apple iPhone 1.1.4 and 2.0 and iPod touch 1.1.4 and 2.0 allows remote attackers to cause a denial of service (browser crash) via a JavaScript alert call with an argument that lacks breakable characters and has a length that is a multiple of the memory page size, leading to an out-of-bounds read.
41	CVE-2008-3171	200		+Info	2008-07-14	2008-09-10	5.0	None	Remote	Low	Not required	Partial	None	None
Apple Safari sends Referer headers containing https URLs to different https web sites, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
42	CVE-2008-1999				2008-04-28	2009-01-29	5.0	None	Remote	Low	Not required	None	Partial	None
Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.
43	CVE-2007-4812	119		DoS Overflow	2007-09-11	2009-02-05	5.0	None	Remote	Low	Not required	None	None	Partial
Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact by setting document.location.hash to a long string. NOTE: the crash might actually occur in the alert method.
44	CVE-2007-2163			DoS	2007-04-22	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Apple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
45	CVE-2006-6238			+Info	2006-12-03	2008-09-05	5.0	None	Remote	Low	Not required	Partial	None	None
The AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically populated form fields are visible to the user, which allows remote attackers to obtain sensitive information, such as usernames and passwords, via input fields of zero width, a variant of CVE-2006-6077.
46	CVE-2006-3372			DoS	2006-07-06	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which triggers a null dereference.
47	CVE-2006-3224			DoS	2006-06-26	2008-09-05	5.4	None	Remote	High	Not required	None	None	Complete
Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop. NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself.
48	CVE-2006-2019			DoS	2006-04-25	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.
49	CVE-2006-1988			DoS	2006-04-21	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE.
50	CVE-2006-1985	119		Exec Code Overflow	2006-04-21	2011-10-18	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.

Total number of vulnerabilities : 63 Page : 1 (This Page)2