CVE-2010-0924 - cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in the BACKGROUND attribute of a BODY element

Back Back to CVE browser

MEDIUM

cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in the BACKGROUND attribute of a BODY element

Published Mar 3, 2010

5.0

MEDIUM

CVSS 2.0

EPSS 1.15%

Description

cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe 531.21.10 in Apple Safari 4.0.3 and 4.0.4 on Windows, allows remote attackers to cause a denial of service (application crash) via a long string in the BACKGROUND attribute of a BODY element.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://nobytes.com/exploits/Safari_4.0.4_background_DoS_pl.txt
x_refsource_MISCExploit
http://www.securityfocus.com/bid/38447
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0949
Advisory

Link	Providers	Tags
http://nobytes.com/exploits/Safari_4.0.4_background_DoS_pl.txt		x_refsource_MISCExploit
http://www.securityfocus.com/bid/38447		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0949		Advisory