critical9.3Public exploit code
CVE-2009-0070
Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application cra…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari - 'ARGUMENTS' Array Integer Overflow HeapSpray (PoC)2009-01-05 · dos · multiple · Verified
Impact
Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | All versions |