Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Peter Vreudegnhil

Researcher fromTippingPoint Zero Day Initiative
#27295of 53,633
9.3Total CVSS
Vulnerabilities · 1
PT-2008-3808
9.3
2008-07-14
Apple · Safari · CVE-2008-2317
Name of the Vulnerable Software and Affected Versions: Apple Safari (affected versions not specified) Description: The issue is related to improper garbage collection of JavaScript document elements in WebCore. This can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in heap corruption and application crash. The exploitation is demonstrated via a reference to the `ownerNode` property of a copied `CSSStyleSheet` object of a `STYLE` element. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.