medium4.3Public exploit code
CVE-2010-1131
JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML docum…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 4.0.5 - Object Tag 'JavaScriptCore.dll' Crash (Denial of Service)2010-03-22 · dos · windows · Verified
- Apple Safari 4.0.5 - 'JavaScriptCore.dll' Stack Exhaustion2010-05-03 · dos · windows
Impact
JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | Version 4.0.5 |