Apple Safari File Download Remote Memory Corruption Vulnerability
BID:28813
Info
Apple Safari File Download Remote Memory Corruption Vulnerability
| Bugtraq ID: | 28813 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-1024 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2008 12:00AM |
| Updated: | Apr 18 2008 07:17PM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 |
| Not Vulnerable: |
Apple Safari 3.1.1 |
Discussion
Apple Safari File Download Remote Memory Corruption Vulnerability
Apple Safari is prone to a remote memory-corruption vulnerability that occurs when downloading malicious files.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects versions prior to Apple Safari 3.1.1 running on Microsoft Windows XP and Windows Vista.
NOTE: This vulnerability may be related to the issue described in BID 28404 (Apple Safari File Download Remote Denial of Service Vulnerability).
Apple Safari is prone to a remote memory-corruption vulnerability that occurs when downloading malicious files.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects versions prior to Apple Safari 3.1.1 running on Microsoft Windows XP and Windows Vista.
NOTE: This vulnerability may be related to the issue described in BID 28404 (Apple Safari File Download Remote Denial of Service Vulnerability).
Exploit / POC
Apple Safari File Download Remote Memory Corruption Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple Safari File Download Remote Memory Corruption Vulnerability
Solution:
The vendor released Safari 3.1.1 to address this issue. Please see the references for more information.
Apple Safari 3.1
Apple Safari 3.0.1 Beta for Windows
Apple Safari 3.0.2 Beta for Windows
Solution:
The vendor released Safari 3.1.1 to address this issue. Please see the references for more information.
Apple Safari 3.1
-
Apple SafariSetup.exe
Safari for Windows XP or Vista
http://www.apple.com/safari/download/
Apple Safari 3.0.1 Beta for Windows
-
Apple SafariQuickTimeSetup.exe
Safari+QuickTime for Windows XP or Vista
http://www.apple.com/safari/download/
Apple Safari 3.0.2 Beta for Windows
-
Apple SafariQuickTimeSetup.exe
Safari+QuickTime for Windows XP or Vista
http://www.apple.com/safari/download/
References
Apple Safari File Download Remote Memory Corruption Vulnerability
References:
References: