medium5.0Public exploit code
CVE-2005-3018
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 1.x/2.0.1 - Data URI Memory Corruption2005-09-17 · dos · osx · Verified
Impact
Apple Safari allows remote attackers to cause a denial of service (application crash) via a crafted data:// URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | Versions 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112715234411672&w=2
- http://secunia.com/advisories/16875/
- http://www.osvdb.org/19569
- http://www.securityfocus.com/bid/14868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22331
- http://marc.info/?l=bugtraq&m=112715234411672&w=2
- http://secunia.com/advisories/16875/
- http://www.osvdb.org/19569
- http://www.securityfocus.com/bid/14868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22331