Safari SVG DOM processing PoC

2011.07.27
Risk: High
Local: No
Remote: Yes
CWE: CWE-119


CVSS Base Score: 9.3/10
Impact Subscore: 10/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Complete
Integrity impact: Complete
Availability impact: Complete

/* # Exploit Title: CVE-2011-0222 Safari SVG DOM processing PoC # Date: 2011-07-25 # Author: Nikita Tarakanov (CISS Research Team), Alex Bazhanyuk (CISS Research Team) # Software Link: http://www.apple.com/au/safari/download/ # Version: prior to 5.0.6, 5.1 # Tested on: Win XP SP3, Win 7 SP1 # CVE : CVE-2011-0222 # Status : Patched */ PoC: http://www.exploit-db.com/sploits/CVE-2011-0222.zip

References:

http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
http://support.apple.com/kb/HT4808


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2021, cxsecurity.com

 

Back to Top