リモート Mac OS ホストにインストールされている Apple Safari のバージョンは、 6.1.3 または 7.0.3 以前です。このため、同梱された WebKit コンポーネントに関連する次の脆弱性の影響を受けます：

- メモリ破損やアプリケーションクラッシュ、任意のコード実行を引き起こす可能性がある詳細不明のエラーが存在します。（CVE-2013-2871、CVE-2013-2926、CVE-2013-2928、CVE-2013-6625、CVE-2014-1289、CVE-2014-1290、CVE-2014-1291、CVE-2014-1292、CVE-2014-1293、CVE-2014-1294、CVE-2014-1298、CVE-2014-1299、CVE-2014-1300、CVE-2014-1301、CVE-2014-1302、CVE-2014-1303、CVE-2014-1304、CVE-2014-1305、CVE-2014-1307、CVE-2014-1308、CVE-2014-1309、CVE-2014-1310、CVE-2014-1311、CVE-2014-1312、CVE-2014-1313、CVE-2014-1713）

- リモートの攻撃者が任意のファイルを読み取る可能性がある IPC メッセージおよび「WebProcess」に関連するエラーが存在します。
 （CVE-2014-1297）

遠端 Mac OS X 主機上安裝的 Apple Safari 版本比 6.1.3 或 7.0.3 舊。因此，可能會受到與隨附 WebKit 元件相關的下列弱點影響：

- 存在多個不明錯誤，可導致記憶體損毀、應用程式損毀，並可能導致任意程式碼執行。(CVE-2013-2871、CVE-2013-2926、CVE-2013-2928、CVE-2013-6625、CVE-2014-1289、CVE-2014-1290、CVE-2014-1291、CVE-2014-1292、CVE-2014-1293、CVE-2014-1294、CVE-2014-1298、CVE-2014-1299、CVE-2014-1300、CVE-2014-1301、CVE-2014-1302、CVE-2014-1303、CVE-2014-1304、CVE-2014-1305、CVE-2014-1307、CVE-2014-1308、CVE-2014-1309、CVE-2014-1310、CVE-2014-1311、CVE-2014-1312、CVE-2014-1313、CVE-2014-1713)

- 存在一個與 IPC 訊息和「WebProcess」相關的錯誤，可允許攻擊者讀取任意檔案。
 (CVE-2014-1297)

远程 Mac OS X 主机上安装的 Apple Safari 版本低于 6.1.3 或 7.0.3。因此，它可能受到与包含的 WebKit 组件有关的以下漏洞的影响：

- 存在可允许内存损坏，应用程序崩溃和可能的任意代码执行的不明错误。（CVE-2013-2871、CVE-2013-2926、CVE-2013-2928、CVE-2013-6625、CVE-2014-1289、CVE-2014-1290、CVE-2014-1291、CVE-2014-1292、CVE-2014-1293、CVE-2014-1294、CVE-2014-1298、CVE-2014-1299、CVE-2014-1300、CVE-2014-1301、CVE-2014-1302、CVE-2014-1303、CVE-2014-1304、CVE-2014-1305、CVE-2014-1307、CVE-2014-1308、CVE-2014-1309、CVE-2014-1310、CVE-2014-1311、CVE-2014-1312、CVE-2014-1313、CVE-2014-1713）

- 存在一个与 IPC 消息和“WebProcess”相关的错误，可允许攻击者读取任意文件。
 (CVE-2014-1297)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2023-40414)

  - Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a     denial of service or possibly have unspecified other impact via vectors related to the handling of input.
    (CVE-2013-2871)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The version of Apple Safari installed on the remote Mac OS X host is a version prior to 6.1.3 or 7.0.3. It is, therefore, potentially affected by the following vulnerabilities related to the included WebKit components :

  - Unspecified errors exist that could allow memory     corruption, application crashes and possibly arbitrary     code execution. (CVE-2013-2871, CVE-2013-2926,     CVE-2013-2928, CVE-2013-6625, CVE-2014-1289,     CVE-2014-1290, CVE-2014-1291, CVE-2014-1292,     CVE-2014-1293, CVE-2014-1294, CVE-2014-1298,     CVE-2014-1299, CVE-2014-1300, CVE-2014-1301,     CVE-2014-1302, CVE-2014-1303, CVE-2014-1304,     CVE-2014-1305, CVE-2014-1307, CVE-2014-1308,     CVE-2014-1309, CVE-2014-1310, CVE-2014-1311,     CVE-2014-1312, CVE-2014-1313, CVE-2014-1713)

  - An error exists related to IPC messages and 'WebProcess'     that could allow an attacker to read arbitrary files.
    (CVE-2014-1297)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - WebKit: Improper handling of data types from event objects (CVE-2010-4205)

  - webkitgtk: heap-based buffer overflow (WSA-2015-0001) (CVE-2014-1303)

  - Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and     Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a     denial of service (application crash) via vectors involving HTML document subtrees. (CVE-2010-1761)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host has Safari installed that is older than 6.1.3 or 7.0.3, and is thus unpatched for the following WebKit vulnerabilities :

 - Unspecified errors exist that could allow memory corruption, application crashes and possibly arbitrary code execution. (CVE-2013-2871, CVE-2013-2926, CVE-2013-2928, CVE-2013-6625, CVE-2014-1289, CVE-2014-1290, CVE-2014-1291, CVE-2014-1292, CVE-2014-1293, CVE-2014-1294, CVE-2014-1298, CVE-2014-1299, CVE-2014-1300, CVE-2014-1301, CVE-2014-1302, CVE-2014-1303, CVE-2014-1304, CVE-2014-1305, CVE-2014-1307, CVE-2014-1308, CVE-2014-1309, CVE-2014-1310, CVE-2014-1311, CVE-2014-1312, CVE-2014-1313, CVE-2014-1713)
 - An error exists related to IPC messages and 'WebProcess' that could allow an attacker to read arbitrary files. (CVE-2014-1297)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
73304	Mac OS X：Apple Safari < 6.1.3 / 7.0.3 複数の脆弱性	Nessus	MacOS X Local Security Checks	2014/4/2	2019/11/26	critical
73304	Mac OS X：Apple Safari < 6.1.3 / 7.0.3 多個弱點	Nessus	MacOS X Local Security Checks	2014/4/2	2019/11/26	critical
73304	Mac OS X：Apple Safari < 6.1.3 / 7.0.3 多种漏洞	Nessus	MacOS X Local Security Checks	2014/4/2	2019/11/26	critical
199451	RHEL 7 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	critical
73304	Mac OS X : Apple Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2014/4/2	2019/11/26	critical
199473	RHEL 6 : webkitgtk (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/4	critical
8209	Safari < 6.1.3 / 7.0.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2014/4/10	2019/3/6	high

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

high