=====================================================================

                           CERT-Renater

               Note d'Information No. 2014/VULN051
_____________________________________________________________________

DATE                : 26/02/2014

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Mac OS OS X running Safari versions prior to
                                           6.1.2, 7.0.2.

======================================================================
http://lists.apple.com/archives/security-announce/2014/Feb/msg00001.html
______________________________________________________________________

APPLE-SA-2014-02-25-2 Safari 6.1.2 and Safari 7.0.2

Safari 6.1.2 and Safari 7.0.2 is now available and addresses the
following:

WebKit

Available for:  OS X Lion v10.7.5, OS X Lion Server v10.7.5,
OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.1

Impact:  Visiting a maliciously crafted website may lead to an
unexpected application termination or arbitrary code execution
Description:  Multiple memory corruption issues existed in WebKit.
These issues were addressed through improved memory handling.

CVE-ID
CVE-2013-6635 : cloudfuzzer
CVE-2014-1268 : Apple
CVE-2014-1269 : Apple
CVE-2014-1270 : Apple

For OS X Mavericks systems, Safari 7.0.2 will be included
in OS X Mavericks 10.9.2.

For OS X Mountain Lion systems Safari 6.1.2 may be obtained from
Mac App Store.

For OS X Lion systems Safari 6.1.2 is available via the Apple Software
Update application.

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/


=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================