vendor:
WebKit
by:
ackack
7,5
CVSS
HIGH
Infinite Loop Vulnerability
843
CWE
Product Name: WebKit
Affected Version From: AppleWebKit/531.9 (Safari 4.0.3)
Affected Version To: AppleWebKit/532.5 (Chrome 4.1.249)
Patch Exists: Yes
Related CWE: None
CPE: a:apple:webkit
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Microsoft Windows 7
2010
Infinite Loop Vulnerability in WebKit
This vulnerability is caused by an infinite loop in WebKit, which is a browser engine used in Safari, Chrome, and other browsers. The loop is caused by a setInterval() call in a loop, which causes the browser to continuously execute the loop. This can cause the browser to become unresponsive and crash. The vulnerability has been tested on AppleWebKit/531.9 (Safari 4.0.3), AppleWebKit/531.21.8 (Safari 4.0.4), and AppleWebKit/532.5 (Chrome 4.1.249) on Microsoft Windows 7.
Mitigation:
The best way to mitigate this vulnerability is to ensure that the code does not contain any infinite loops. Additionally, the browser should be updated to the latest version to ensure that any known vulnerabilities have been patched.
