CVE-2008-5821
Apple Safari 3.2 - Denial of Service via Long ALINK Attribute
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2008-5821. PoCs published by Xss mAn, Pr0T3cT10n, Jeremy Brown.
AI-analyzed exploit summary This Perl script generates an HTML file with a malformed CSS style attribute that triggers a Denial of Service (DoS) in Safari 4.0.5 (531.22.7) when opened. The exploit leverages an excessively long 'alink' value to crash the browser.
Description
Memory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows remote attackers to cause a denial of service (memory consumption and browser crash) via a long ALINK attribute in a BODY element in an HTML document.
Exploits (3)
This Perl script generates an HTML file with a malformed CSS style attribute that triggers a Denial of Service (DoS) in Safari 4.0.5 (531.22.7) when opened. The exploit leverages an excessively long 'alink' value to crash the browser.
This exploit generates an HTML file with an excessively long 'alink' attribute in the body tag, triggering a denial-of-service (DoS) condition in Apple Safari on iOS 4.0.1. The vulnerability resides in the WebKit library, causing the browser to crash when the file is loaded.
This Perl script generates an HTML file that triggers a memory leak in Safari's WebKit library by creating an excessively long 'alink' attribute, leading to a denial-of-service condition.