CVE-2011-0222
Safari < 5.0.6 - Remote Code Execution via WebKit Memory Corruption
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-0222. PoCs published by Abysssec, Nikita Tarakanov.
AI-analyzed exploit summary This exploit targets a memory corruption vulnerability in WebKit (CVE-2011-0222) to achieve remote code execution via a crafted website. It uses ROP to bypass DEP and is tested on Windows XP SP3 with Safari 5.0.5.
Description
WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1.
Exploits (2)
This exploit targets a memory corruption vulnerability in WebKit (CVE-2011-0222) to achieve remote code execution via a crafted website. It uses ROP to bypass DEP and is tested on Windows XP SP3 with Safari 5.0.5.
This exploit targets a vulnerability in Safari's SVG DOM processing, allowing arbitrary code execution via a crafted SVG file. The PoC is hosted externally and is known to work on unpatched versions of Safari prior to 5.0.6 and 5.1.