CERTA-2007-AVI-343
Vulnerability from certfr_avis - Published: 2007-08-02 - Updated: 2007-08-02
L'ajout d'un site dans la liste des favoris de Safari permet la réalisation d'un déni de service et l'exécution de code arbitraire.
Description
L'ajout d'un site au titre malicieusement créé dans les favoris de Safari permet de provoquer un dépassement de mémoire et ainsi de provoquer un arret innopiné de l'application ou l'exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Apple Safari pour Windows, versions antèrieures à la Beta Update 3.0.3.
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "\u003cp\u003eApple Safari pour Windows, versions ant\u00e8rieures \u00e0 la Beta Update 3.0.3.\u003c/p\u003e",
"content": "## Description\n\nL\u0027ajout d\u0027un site au titre malicieusement cr\u00e9\u00e9 dans les favoris de\nSafari permet de provoquer un d\u00e9passement de m\u00e9moire et ainsi de\nprovoquer un arret innopin\u00e9 de l\u0027application ou l\u0027ex\u00e9cution de code\narbitraire.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2007-08-02T00:00:00",
"last_revision_date": "2007-08-02T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Apple 306174 du 30 juillet 2007 :",
"url": "http://docs.info.apple.com/article.html?artnum=306174"
}
],
"reference": "CERTA-2007-AVI-343",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2007-08-02T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "D\u00e9ni de service"
}
],
"summary": "L\u0027ajout d\u0027un site dans la liste des favoris de Safari permet la\nr\u00e9alisation d\u0027un d\u00e9ni de service et l\u0027ex\u00e9cution de code arbitraire.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Apple Safari pour Windows",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 de Apple 306174 du 30 juillet 2007",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…