CVE-2013-1039
Description
WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-09-18-2.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: product-security@apple.com — http://support.apple.com/kb/HT6001
Vendor advisory: product-security@apple.com — http://support.apple.com/kb/HT5934
Vendor advisory: product-security@apple.com — http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
Vendor advisory: product-security@apple.com — http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
Vendor advisory: product-security@apple.com — http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| macos | 1.0.0 | affected | |
| macos | 1.0.1 | affected | |
| macos | 1.0.2 | affected | |
| macos | 1.1.0 | affected | |
| macos | 1.1.1 | affected | |
| macos | 1.1.2 | affected | |
| macos | 1.1.3 | affected | |
| macos | 1.1.4 | affected | |
| macos | 1.1.5 | affected | |
| macos | 2.0 | affected | |
| macos | 2.0.0 | affected | |
| macos | 2.0.1 | affected | |
| macos | 2.0.2 | affected | |
| macos | 2.1 | affected | |
| macos | 2.1.1 | affected | |
| macos | 2.2 | affected | |
| macos | 2.2.1 | affected | |
| macos | 3.0 | affected | |
| macos | 3.0.1 | affected | |
| macos | 3.1 | affected | |
| macos | 3.1.2 | affected | |
| macos | 3.1.3 | affected | |
| macos | 3.2 | affected | |
| macos | 3.2.1 | affected | |
| macos | 3.2.2 | affected | |
| macos | 4.0 | affected | |
| macos | 4.0.1 | affected | |
| macos | 4.0.2 | affected | |
| macos | 4.1 | affected | |
| macos | 4.2.1 | affected | |
| macos | 4.2.5 | affected | |
| macos | 4.2.8 | affected | |
| macos | 4.3.0 | affected | |
| macos | 4.3.1 | affected | |
| macos | 4.3.2 | affected | |
| macos | 4.3.3 | affected | |
| macos | 4.3.5 | affected | |
| macos | 5.0 | affected | |
| macos | 5.0.1 | affected | |
| macos | 5.1 | affected | |
| macos | 5.1.1 | affected | |
| macos | 6.0 | affected | |
| macos | 6.0.1 | affected | |
| macos | 6.0.2 | affected | |
| macos | 6.1 | affected | |
| macos | 6.1.2 | affected | |
| macos | 6.1.3 | affected | |
| macos | 6.1.4 | affected | |
| macos | 6.1.5 | affected | |
| macos | 6.1.6 | affected | |
References
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.securitytracker.com/id/1029054
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00003.html
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00009.html
- http://lists.apple.com/archives/security-announce/2013/Sep/msg00006.html
- http://secunia.com/advisories/54886
- http://support.apple.com/kb/HT5934
- http://support.apple.com/kb/HT6001
- http://www.securitytracker.com/id/1029054
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.