Apple Safari for Windows Document.Location Denial of Service Vulnerability
BID:24499
Info
Apple Safari for Windows Document.Location Denial of Service Vulnerability
| Bugtraq ID: | 24499 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 16 2007 12:00AM |
| Updated: | Jun 18 2007 05:19PM |
| Credit: | [email protected] is credited with discovering this vulnerability. |
| Vulnerable: |
Apple Safari 3.0.1 Beta for Windows Apple Safari 3 Beta for Windows |
| Not Vulnerable: | |
Discussion
Apple Safari for Windows Document.Location Denial of Service Vulnerability
Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input.
An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document.
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.
Safari 3.0 and 3.0.1 public beta for Windows are reported vulnerable.
NOTE: At the time of writing, Symantec was unable to reproduce this vulnerability. We are investigating this issue further and will update this BID as more information emerges.
Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input.
An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document.
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions.
Safari 3.0 and 3.0.1 public beta for Windows are reported vulnerable.
NOTE: At the time of writing, Symantec was unable to reproduce this vulnerability. We are investigating this issue further and will update this BID as more information emerges.
Exploit / POC
Apple Safari for Windows Document.Location Denial of Service Vulnerability
An attacker may exploit this issue by enticing victims into viewing a maliciously crafted webpage.
The following proof of concept is available:
An attacker may exploit this issue by enticing victims into viewing a maliciously crafted webpage.
The following proof of concept is available:
Solution / Fix
Apple Safari for Windows Document.Location Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
Apple Safari for Windows Document.Location Denial of Service Vulnerability
References:
References: