Cross site scripting

Cross-site scripting XSS vulnerability in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a colon in the hostname portion...

CVE-2008-1025

The CVE-2008-1025 entry concerns Apple Safari/WebKit prior to version 3.1.1, where WebKit mishandles URLs with a colon in the hostname, enabling cross-site scripting (XSS). The vulnerability is rooted in WebKit’s URL handling and affects Safari before 3.1.1. Reported impact is that an attacker ca...

CVE-2008-1026

Integer overflow in the PCRE regular expression compiler JavaScriptCore/pcre/pcrecompile.cpp in Apple WebKit, as used in Safari before 3.1.1, allows remote attackers to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflo...

CVE-2008-1026

In Safari (WebKit), CVE-2008-1026 is a heap-based buffer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp). The issue occurs when a regular expression contains large, nested repetition counts, allowing remote attackers to trigger code execution. Affected prod...

Apple iOS < 1.1.4 DoS

Binary data 4425.prm...

Apple Webkit非法类型转换远程代码执行漏洞

Apple Webkit是Apple Safari WEB浏览器的核心组件。 Apple Webkit不正确执行类型转换，远程攻击者可以利用漏洞可能以应用程序进程权限执行任意指令。 当渲染帧设置时由于不正确执行类型转换可导致内存破坏发生。如果远程攻击者构建恶意WEB页，诱使用户访问，可导致以应用程序进程权限执行任意指令。 WebKit Open Source Project WebKit 0 Apple Safari 3.0.1 Beta for Windows Apple Safari 2.0.4 Apple Safari 2.0.3 Apple Safari 2.0.2 Apple...

Apple WebKit frame rendering memory corruption vulnerability

Overview The Apple Webkit contains a memory corruption vulnerability.This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description According to Apple: WebKit is the open source core of Apple's Safari web browser. It is available as a framework in Mac OS X...

Apple WebKit library ROWSPAN DoS

NULL pointer dereference on large rowspan number in HTTP parsing code...

Code injection

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service null dereference and application crash via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-20...

CVE-2007-0342

CVE-2007-0342 concerns WebCore in Apple WebKit build 18794. The vulnerability enables remote DoS via a TD element with an excessively large ROWSPAN value, causing a null dereference and application crash, as demonstrated by OmniWeb 5.5.3 on Mac OS X 10.4.8. Reports consistently reference this as ...

Apple WebKit build 18794 - WebCore Remote Denial of Service

source: https://www.securityfocus.com/bid/22059/info Apple WebKit is prone to a denial-of-service vulnerability. Attackers may exploit this issue by enticing victims into opening a malicious HTML document with an application using the affected framework. Successful exploits will result in...

Apple WebKit build 18794 - WebCore Remote Denial of Service

Apple WebKit build 18794 - WebCore Remote Denial of Service source: https://www.securityfocus.com/bid/22059/info Apple WebKit is prone to a denial-of-service vulnerability. Attackers may exploit this issue by enticing victims into opening a malicious HTML document with an application using the...