Apple Safari Web Browser DHTML SetAttributeNode() Null Dereference Denial Of Service Vulnerability

Bugtraq ID:	18822
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 05 2006 12:00AM
Updated:	Jul 05 2006 08:19PM
Credit:	Dennis Cox is credited with the discovery of this issue.
Vulnerable:	Apple Safari 2.0.4
Not Vulnerable:

Apple Safari Web Browser DHTML SetAttributeNode() Null Dereference Denial Of Service Vulnerability

Apple Safari web browser is prone to a denial-of-service vulnerability when parsing certain malformed DHTML elements.

An attacker can exploit this issue to crash an affected browser.

Apple Safari Web Browser DHTML SetAttributeNode() Null Dereference Denial Of Service Vulnerability

A proof of concept is available.

• /data/vulnerabilities/exploits/safari_dhtml_setattribnode_poc.txt

Apple Safari Web Browser DHTML SetAttributeNode() Null Dereference Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

Apple Safari Web Browser DHTML SetAttributeNode() Null Dereference Denial Of Service Vulnerability

References:

• MoBB #5: DHTML setAttributeNode() (hdm)
  
• Safari Homepage (Apple)