|
Brought to you by:
Suppliers of:
|
|
|
| |
| This vulnerability allows attackers to execute arbitrary code on vulnerable software utilizing the Apple WebKit library. |
| |
Credit:
The information has been provided by wushi & ling of team509.
The original article can be found at: http://www.zerodayinitiative.com/advisories/ZDI-09-033
|
| |
Vulnerable Systems:
* Apple Safari prior to version 4.0
Immune Systems:
* Apple Safari version 4.0 and later
The specific flaw exists when the document.body element contains a specific XML container containing various elements supporting the 'dir' attribute. During the destruction of this element, if the rendering object responsible for the element is being removed, the application will then make a call to a method for an object that doesn't exist which can lead to code execution under the context of the current user.
CVE Information:
CVE-2009-1701
Disclosure Timeline:
2009-02-09 - Vulnerability reported to vendor
2009-06-08 - Coordinated public release of advisory
|
|
|
|
|
