medium5.0Public exploit code
CVE-2010-1029
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 4.0.4 / Google Chrome 4.0.249 - CSS style Stack Overflow Denial of Service (PoC)2010-02-24 · dos · multiple · Verified
- iPhone - 'WebCore::CSSSelector()' Remote Crash2010-02-24 · dos · hardware
Impact
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | All versions Version 4.0.4 |
| Chrome | Version 4.0.249.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://secunia.com/advisories/43068
- http://www.exploit-db.com/exploits/11567
- http://www.exploit-db.com/exploits/11574
- http://www.securityfocus.com/bid/38398
- http://www.vupen.com/english/advisories/2011/0212
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56524
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56527
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14301