CVE-2010-1131
Apple Safari - Denial of Service via Repeated <object> Substring
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1131. PoCs published by 3lkt3F0k4, Mathias Karlsson.
AI-analyzed exploit summary This exploit triggers a denial-of-service (DoS) condition in Safari 4.0.5 on Windows XP SP3 by causing a crash in JavaScriptCore.dll via a large number of nested <object> tags. The PoC demonstrates a memory corruption issue leading to an access violation.
Description
JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.
Exploits (2)
This exploit triggers a denial-of-service (DoS) condition in Safari 4.0.5 on Windows XP SP3 by causing a crash in JavaScriptCore.dll via a large number of nested <object> tags. The PoC demonstrates a memory corruption issue leading to an access violation.
This exploit triggers a DoS condition in Safari 5.31.22.7 by recursively creating iframes and calling window.print(), leading to a stack overflow in JavaScriptCore.dll. The crash is consistent with the provided error report.