CVE-2010-1729

Safari - Denial of Service via Infinite Loop in JavaScript Marquee Sequence

Title source: llm
STIX 2.1

Description

WebKit.dll in WebKit, as used in Safari.exe 4.531.9.1 in Apple Safari, allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop.

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43068
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0212
Exploit x_refsource_misc
http://h.ackack.net/?p=258

Scores

EPSS 0.0198
EPSS Percentile 78.4%

Details

CWE
CWE-399
Status published
Products (2)
apple/safari
apple/webkit
Published May 06, 2010
Tracked Since Feb 18, 2026