Apple Mobile Safari Crafted JavaScript '.' Assignment Remote Denial of Service Vulnerability

Bugtraq ID:	45552
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 22 2010 12:00AM
Updated:	Dec 22 2010 12:00AM
Credit:	Pr0T3cT10n
Vulnerable:	Apple Mobile Safari 0 + Apple Mac OS X 10.4.2 + Apple Mac OS X 10.4.2 + Apple Mac OS X 10.4.1 + Apple Mac OS X 10.4.1 + Apple Mac OS X 10.4 + Apple Mac OS X 10.4 + Apple Mac OS X Server 10.4.2 + Apple Mac OS X Server 10.4.1 + Apple Mac OS X Server 10.4.1 + Apple Mac OS X Server 10.4 + Apple Mac OS X Server 10.4
Not Vulnerable:

Apple Mobile Safari Crafted JavaScript '.' Assignment Remote Denial of Service Vulnerability

Apple Mobile Safari is prone to a denial-of-service vulnerability when handling specially crafted webpages.

Attackers can exploit this issue by enticing an unsuspecting user to view a malicious web page.

Successfully exploiting this issue will cause the application to crash, denying service to legitimate users.

Apple Mobile Safari Crafted JavaScript '.' Assignment Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/45552.php

Apple Mobile Safari Crafted JavaScript '.' Assignment Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple Mobile Safari Crafted JavaScript '.' Assignment Remote Denial of Service Vulnerability

References:

• Safari Homepage (Apple)