Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Peter Vreudegnhil

Pesquisador deTippingPoint Zero Day Initiative
#27498de 53,635
9.3CVSS total
Vulnerabilidades · 1
PT-2008-3808
9.3
2008-07-14
Apple · Safari · CVE-2008-2317
Name of the Vulnerable Software and Affected Versions: Apple Safari (affected versions not specified) Description: The issue is related to improper garbage collection of JavaScript document elements in WebCore. This can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in heap corruption and application crash. The exploitation is demonstrated via a reference to the `ownerNode` property of a copied `CSSStyleSheet` object of a `STYLE` element. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.