Apple Safari JavaScript 'eval()' Denial of Service Vulnerability

Bugtraq ID:	36298
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 07 2009 12:00AM
Updated:	Sep 08 2009 03:31PM
Credit:	Jeremy Brown
Vulnerable:	WebKit Open Source Project WebKit 0 Apple Safari 3.2.3 for Windows
Not Vulnerable:	Apple Safari 4 for Windows

Apple Safari JavaScript 'eval()' Denial of Service Vulnerability

Apple Safari is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Safari 3.2.3 for Windows is vulnerable; other versions may also be affected.

NOTE: Other applications that use the WebKit framework may also be affected.

Apple Safari JavaScript 'eval()' Denial of Service Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into viewing a malicious webpage.

The following exploit code is available:

• /data/vulnerabilities/exploits/36298.pl

Apple Safari JavaScript 'eval()' Denial of Service Vulnerability

Solution:
Reportedly, this issue is fixed in Safari 4. Please see the example exploit for more information.

Apple Safari JavaScript 'eval()' Denial of Service Vulnerability

References:

• Safari Homepage (Apple)