Record summary

CVE-2010-1131 has a selected CVSS score of 4.3; EIP currently links 2 catalogued exploits.

Description

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the <object> substring.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
2

Proofs of concept

2

Catalogued exploits

ExploitDBApple Safari 4.0.5 - Object Tag 'JavaScriptCore.dll' Crash (Denial of Service)ExploitDB exploitby 3lkt3F0k4Not analyzed1 file
ExploitDB

PoC details
ExploitDBApple Safari 4.0.5 - 'JavaScriptCore.dll' Stack ExhaustionExploitDB exploitby Mathias KarlssonNot analyzed1 file
ExploitDB

PoC details

References

3