Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

HTTP:STC:SAFARI:RUNIN-UAF

Severity

High

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Google Chrome and Apple Safari Run-in Handling Use After Free

Release Date

2012/05/01

Update Number

2127

Supported Platforms

idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

HTTP: Google Chrome and Apple Safari Run-in Handling Use After Free


This signature detects attempts to exploit a known vulnerability against Apple Safari and Google Chrome. A successful attack can lead to arbitrary code execution.

Extended Description

Google Chrome is prone to multiple vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of the browser, bypass security restrictions, and perform cross-origin attacks; other attacks may also be possible. Versions prior to Chrome 18.0.1025.151 are vulnerable.

Affected Products

  • Apple Safari 5.0
  • Apple Safari 5.0.1
  • Apple Safari 5.0.1 for Windows
  • Apple Safari 5.0.2
  • Apple Safari 5.0.2 for Windows
  • Apple Safari 5.0.3
  • Apple Safari 5.0.3 for Windows
  • Apple Safari 5.0.4
  • Apple Safari 5.0.4 for Windows
  • Apple Safari 5.0.5
  • Apple Safari 5.0.5 for Windows
  • Apple Safari 5.0.6
  • Apple Safari 5.0.6 for windows
  • Apple Safari 5.0 For Windows
  • Apple Safari 5.1
  • Apple Safari 5.1.1
  • Apple Safari 5.1.1 for Windows
  • Apple Safari 5.1.4
  • Apple Safari 5.1.4 for Windows
  • Apple Safari 5.1.5 for Windows
  • Apple Safari 5.1.7
  • Apple Safari 5.1.7 for Windows
  • Apple Safari 5.1 for Windows
  • Gentoo Linux
  • Google Chrome 10
  • Google Chrome 10.0.648.127
  • Google Chrome 10.0.648.127
  • Google Chrome 10.0.648.128
  • Google Chrome 10.0.648.133
  • Google Chrome 10.0.648.204
  • Google Chrome 10.0.648.205
  • Google Chrome 10.0.648.205
  • Google Chrome 10.0.648.205
  • Google Chrome 11
  • Google Chrome 11.0.672.2
  • Google Chrome 11.0.696.43
  • Google Chrome 11.0.696.43
  • Google Chrome 11.0.696.57
  • Google Chrome 11.0.696.65
  • Google Chrome 11.0.696.68
  • Google Chrome 11.0.696.71
  • Google Chrome 11.0.696.77
  • Google Chrome 12
  • Google Chrome 12.0.742.100
  • Google Chrome 12.0.742.112
  • Google Chrome 12.0.742.91
  • Google Chrome 13
  • Google Chrome 13.0.782.107
  • Google Chrome 13.0.782.112
  • Google Chrome 13.0.782.215
  • Google Chrome 14
  • Google Chrome 14.0.835.163
  • Google Chrome 14.0.835.186
  • Google Chrome 14.0.835.202
  • Google Chrome 15.0.874 102
  • Google Chrome 15.0.874.120
  • Google Chrome 15.0.874.121
  • Google Chrome 16
  • Google Chrome 16.0.912.63
  • Google Chrome 16.0.912.75
  • Google Chrome 16.0.912.75
  • Google Chrome 16.0.912.77
  • Google Chrome 17.0.963.46
  • Google Chrome 17.0.963.56
  • Google Chrome 17.0.963.60
  • Google Chrome 17.0.963.65
  • Google Chrome 17.0.963.78
  • Google Chrome 17.0.963.79
  • Google Chrome 17.0.963.83
  • Google Chrome 18.0.1025.142
  • Ubuntu Ubuntu Linux 12.04 LTS amd64
  • Ubuntu Ubuntu Linux 12.04 LTS i386

References

  • BugTraq: 52913
  • CVE: CVE-2011-3068

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out