PT-2005-4638 · Apple · Safari

Kyle Wheeler · Publicado 2005-11-29 · Atualizado 2016-10-18 · CVE-2005-3897

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apple Safari version 2.0.2

Description The issue allows remote attackers to cause a denial of service, resulting in a system slowdown. This can be achieved via a Javascript BODY onload event that calls the window function.

Recommendations For Apple Safari version 2.0.2, consider disabling Javascript or restricting the use of the window function in the BODY onload event to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-3897

Produtos afetados

Safari

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-3897 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=113278010907401&w=2 · Nota