Signature Detail
Short Name |
HTTP:STC:SAFARI:WEBKIT-COLUMN |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Apple Safari WebKit Button Column Blocks Memory Corruption |
Release Date |
2012/08/05 |
Update Number |
2170 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Apple Safari WebKit Button Column Blocks Memory Corruption
This signature detects attempts to exploit a known vulnerability against WebKit, a component of Apple Safari. A successful attack can lead to arbitrary code execution.
Extended Description
WebKit is prone to multiple unspecified remote code-execution vulnerabilities. Attackers can exploit these issues by performing a man-in-the-middle attack. Successful attacks will result in arbitrary code execution; failed attacks may cause denial-of-service conditions. Note: This issue was previously discussed in BID 54669 (Apple Safari Prior to 6.0 Multiple Security Vulnerabilities), but has been given its own record to better document it.
Affected Products
- Apple Safari 5.0
- Apple Safari 5.0.1
- Apple Safari 5.0.1 for Windows
- Apple Safari 5.0.2
- Apple Safari 5.0.2 for Windows
- Apple Safari 5.0.3
- Apple Safari 5.0.3 for Windows
- Apple Safari 5.0.4
- Apple Safari 5.0.4 for Windows
- Apple Safari 5.0.5
- Apple Safari 5.0.5 for Windows
- Apple Safari 5.0.6
- Apple Safari 5.0.6 for windows
- Apple Safari 5.0 For Windows
- Apple Safari 5.1
- Apple Safari 5.1.1
- Apple Safari 5.1.1 for Windows
- Apple Safari 5.1.4
- Apple Safari 5.1.4 for Windows
- Apple Safari 5.1.5 for Windows
- Apple Safari 5.1.7
- Apple Safari 5.1.7 for Windows
- Apple Safari 5.1 for Windows
- Ubuntu Ubuntu Linux 12.04 LTS amd64
- Ubuntu Ubuntu Linux 12.04 LTS i386
- WebKit Open Source Project WebKit 1.2.2
- WebKit Open Source Project WebKit 1.2.2-1
- WebKit Open Source Project WebKit 1.2.3
- WebKit Open Source Project WebKit 1.2.5
- WebKit Open Source Project WebKit 1.2.X
- WebKit Open Source Project WebKit R38566
- WebKit Open Source Project WebKit R51295
- WebKit Open Source Project WebKit R52401
- WebKit Open Source Project WebKit R52833
- WebKit Open Source Project WebKit r77705
- WebKit Open Source Project WebKit r82222
- WebKit Open Source Project WebKit
References
- BugTraq: 54680
- CVE: CVE-2012-1520