CVE-2010-1179

Safari on iPhone OS 3.1.3 - Denial of Service or Remote Code Execution via VML recolorinfo numcolors Attribute

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-1179. PoCs published by Nishant Das Patnaik.

AI-analyzed exploit summary This exploit leverages a VML (Vector Markup Language) parsing vulnerability in Safari for iPhone/iPod Touch to trigger a denial-of-service (DoS) condition. The PoC uses heap spraying and malformed VML tags to crash the browser, with potential for arbitrary code execution.

Description

Safari on Apple iPhone OS 3.1.3 for iPod touch allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a large integer in the numcolors attribute of a recolorinfo element in a VML file, possibly a related issue to CVE-2007-0024.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Nishant Das Patnaik · textdosios
https://www.exploit-db.com/exploits/11890

This exploit leverages a VML (Vector Markup Language) parsing vulnerability in Safari for iPhone/iPod Touch to trigger a denial-of-service (DoS) condition. The PoC uses heap spraying and malformed VML tags to crash the browser, with potential for arbitrary code execution.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Safari on iPhone/iPod Touch (iPhone OS 3.1.3)
No auth needed
Prerequisites: Victim must visit a crafted webpage
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/11890
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38990

Scores

EPSS 0.0887
EPSS Percentile 94.5%

Details

CWE
CWE-189
Status published
Products (1)
apple/safari
Published Mar 29, 2010
Tracked Since Feb 18, 2026