PT-2010-2647 · Apple · Safari+1

Publicado 2010-03-03 · Atualizado 2010-03-04 · CVE-2010-0924

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apple Safari versions 4.0.3 through 4.0.4

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing a long string in the BACKGROUND attribute of a BODY element. This is related to the cfnetwork.dll component in CFNetwork, used by safari.exe.

Recommendations For Apple Safari versions 4.0.3 through 4.0.4, consider avoiding the use of long strings in the BACKGROUND attribute of BODY elements until a fix is available. As a temporary workaround, restrict the input allowed for the BACKGROUND attribute to prevent potential crashes.

Exploit

Correção

Identificadores relacionados

CVE-2010-0924

Produtos afetados

Cfnetwork

Safari

Referências · 3

• 🔥 http://nobytes.com/exploits/Safari_4.0.4_background_DoS_pl.txt · Exploit
• 🔥 http://securityfocus.com/bid/38447 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0924 · Nota de Segurança