CVE-2009-4186 - Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property

Back Back to CVE browser

HIGH

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property

Published Dec 3, 2009

9.3

HIGH

CVSS 2.0

EPSS 6.53%

Description

Stack consumption vulnerability in Apple Safari 4.0.3 on Windows allows remote attackers to cause a denial of service (application crash) via a long URI value (aka url) in the Cascading Style Sheets (CSS) background property.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (4)

http://www.exploit-db.com/exploits/10102
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/37039
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4156
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54487
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.exploit-db.com/exploits/10102		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/37039		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-4156		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54487		vdb-entryx_refsource_XF