.:[ packet storm ]:.
                             
beyond paranoid
beyond paranoid

 ///  File Name:ZDI-08-045.txt
Description:
A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the garbage collection of JavaScript document elements in WebCore. When a CSSStyleSheet object of a style element is copied, and the style element is deallocated, a reference to the ownerNode property of the copied CSSStyleSheet object will result in a heap corruption allowing for the execution of arbitrary code.
Homepage:http://www.zerodayinitiative.com/
File Size:3219
Related CVE(s):CVE-2008-2317
Last Modified:Jul 25 20:58:18 2008
MD5 Checksum:fd7eab9f0357ba1ffd8f1eb1b36d1baa

 .:. Back