Apple Safari WebKit JavaScript Regular Expression Repetition Counts Buffer Overflow Vulnerability
BID:28815
Info
Apple Safari WebKit JavaScript Regular Expression Repetition Counts Buffer Overflow Vulnerability
| Bugtraq ID: | 28815 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-1026 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2008 12:00AM |
| Updated: | Jul 11 2008 07:49PM |
| Credit: | Charlie Miller working with TippingPoint's Zero Day Initiative |
| Vulnerable: |
Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple Safari 2.0.1 Apple Safari 1.3.1 Apple Safari 1.3 Apple Safari 1.2.3 Apple Safari 1.2.2 Apple Safari 1.2.1 Apple Safari 1.2 Apple Safari 1.1 Apple Safari 1.0 Apple Safari Beta 2 Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 1.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 1 Apple iPhone 0 |
| Not Vulnerable: |
Apple Safari 3.1.1 Apple iPod Touch 2.0 Apple iPhone 2.0 |
Discussion
Apple Safari WebKit JavaScript Regular Expression Repetition Counts Buffer Overflow Vulnerability
Apple Safari is prone to a buffer-overflow vulnerability.
Attackers may exploit this issue to execute arbitrary code or to crash the affected application. Other attacks are also possible.
This issue affects versions prior to Apple Safari 3.1.1 running on the following platforms:
Mac OS X v10.4.11
Mac OS X Server v10.4.11
Mac OS X v10.5.2
Mac OS X Server v10.5.2
Windows XP
Windows Vista
Apple Safari is prone to a buffer-overflow vulnerability.
Attackers may exploit this issue to execute arbitrary code or to crash the affected application. Other attacks are also possible.
This issue affects versions prior to Apple Safari 3.1.1 running on the following platforms:
Mac OS X v10.4.11
Mac OS X Server v10.4.11
Mac OS X v10.5.2
Mac OS X Server v10.5.2
Windows XP
Windows Vista
Exploit / POC
Apple Safari WebKit JavaScript Regular Expression Repetition Counts Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple Safari WebKit JavaScript Regular Expression Repetition Counts Buffer Overflow Vulnerability
Solution:
The vendor has released updates to address this issue. Please see the referenced advisories for more information.
Apple Safari 3.1
Solution:
The vendor has released updates to address this issue. Please see the referenced advisories for more information.
Apple Safari 3.1
-
Apple Safari 3.1.1 for Leopard
Safari for Mac OS X v10.5.2
http://www.apple.com/safari/download/Safari311UpdLeo.dmg -
Apple Safari 3.1.1 Tiger
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/Safari311UpdTiger.dmg -
Apple Safari 3.1.1 Windows QuickTime Setup
Safari+QuickTime for Windows XP or Vista
http://www.apple.com/safari/download/SafariQuickTimeSetup.exe -
Apple Safari 3.1.1 Windows Setup
Safari for Windows XP or Vista
http://www.apple.com/safari/download/SafariSetup.exe
References
Apple Safari WebKit JavaScript Regular Expression Repetition Counts Buffer Overflow Vulnerability
References:
References: