PatchTheCVEcfnetwork vulnerabilities and fixes
Recent CVEs affecting cfnetwork, with upgrade or downgrade steps. 6 tracked.
cfnetwork has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2011-07-21. Highest priority: CVE-2010-1383 (score 53/100).
- CVE-2011-0214 MEDIUM 5.0 MITIGATE UPGRADE CFNetwork in Apple Safari before 5.0.6 on Windows does not properly handle an untrusted attribute of a system
- CVE-2010-1800 MEDIUM 5.0 MITIGATE MITIGATE CFNetwork in Apple Mac OS X 10.6.3 and 10.6.4 supports anonymous SSL and TLS connections, which allows man-in-
- CVE-2010-1420 MEDIUM 4.3 MITIGATE UPGRADE Cross-site scripting (XSS) vulnerability in CFNetwork in Apple Safari before 5.0.6 allows remote attackers to
- CVE-2010-1383 HIGH 9.3 MITIGATE UPGRADE CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by repla
- CVE-2007-2403 MEDIUM 6.8 MITIGATE CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attac
- CVE-2007-0464 MEDIUM 5.0 DOWNGRADE The _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 al
FAQ
How do I fix cfnetwork vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cfnetwork being exploited right now?
None of the tracked cfnetwork CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cfnetwork CVE should I patch first?
CVE-2010-1383 currently ranks highest (53/100): CFNetwork in Apple Safari before 5.0.6 on Windows allows remote web servers to execute arbitrary code by repla.