Apple Safari 'CFCharacterSetInitInlineBuffer()' Remote Denial Of Service Vulnerability

Bugtraq ID:	35481
Class:	Input Validation Error
CVE:	CVE-2009-2421
Remote:	Yes
Local:	No
Published:	Jun 23 2009 12:00AM
Updated:	Jul 20 2009 10:36PM
Credit:	Alexios Fakos of n.runs AG
Vulnerable:	Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 3.2 Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3
Not Vulnerable:	Apple Safari 4 for Windows Apple Safari 4

Apple Safari 'CFCharacterSetInitInlineBuffer()' Remote Denial Of Service Vulnerability

Apple Safari is prone to a denial-of-service vulnerability that stems from a NULL-pointer dereference.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Versions prior to Apple Safari 4 are vulnerable.

Apple Safari 'CFCharacterSetInitInlineBuffer()' Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Safari 'CFCharacterSetInitInlineBuffer()' Remote Denial Of Service Vulnerability

Solution:
Updates are available; please see the references for details.

Apple Safari 'CFCharacterSetInitInlineBuffer()' Remote Denial Of Service Vulnerability

References:

• Safari Homepage (Apple)
  
• n.runs-SA-2009.006 - Apple Safari - Null pointer dereference ()