WebKit Unspecified Memory Corruption Remote Code Execution Vulnerability

Bugtraq ID:	49350
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 29 2011 12:00AM
Updated:	Aug 29 2011 12:00AM
Credit:	Ivan Sanchez & Hernan Hegykozi
Vulnerable:	WebKit Open Source Project WebKit 2 Apple Safari 5.1 for Windows Apple Safari 5.1
Not Vulnerable:

WebKit Unspecified Memory Corruption Remote Code Execution Vulnerability

WebKit is prone to a remote code-execution vulnerability due to memory corruption.

Attackers can exploit this issue by enticing an unsuspecting user to visit a malicious Web page. Successful attacks will result in arbitrary code execution; failed attacks may cause denial-of-service conditions.

WebKit Unspecified Memory Corruption Remote Code Execution Vulnerability

The reporter has developed a proof of concept. Please contract the reporter for more information.

WebKit Unspecified Memory Corruption Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebKit Unspecified Memory Corruption Remote Code Execution Vulnerability

References:

• Apple Safari Homepage (Apple)
  
• Webkit Homepage (Webkit)
  
• WebKit2 �?? Safari 5.1 �?? Remote Memory Corruption Vulnerability (Author(s): Ivan Sanchez & Hernan Hegykozi)