header-logo
Suggest Exploit
vendor:
Safari
by:
Krystian Kloskowski
7,5
CVSS
HIGH
Memory Corruption
119
CWE
Product Name: Safari
Affected Version From: 4.0.5
Affected Version To: 4.0.5
Patch Exists: YES
Related CWE: N/A
CPE: a:apple:safari
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP2 Polish
2009

Apple Safari 4.0.5 parent.close() (memory corruption) 0day Code Execution Exploit

This exploit is a 0day code execution exploit for Apple Safari 4.0.5. It is a memory corruption vulnerability that can be exploited by using the parent.close() function. The exploit code contains a Windows Execute Command (calc) shellcode. It can be used both locally and remotely, provided that the POPUP must be enabled [Ctrl+Shift+K]. The exploit code contains a JavaScript code that creates an array of 1000 elements, each containing a block of memory with the shellcode. It then uses the parent.close() function to trigger the memory corruption.

Mitigation:

The user should update to the latest version of Safari to patch the vulnerability.
Source

Exploit-DB raw data: