Safari Address Bar Spoofing and Memory Corruption Vulnerabilities

Posted on Monday, March 24, 2008 @ 21:36:21 PDT in Security
by Raven

SECUNIA ADVISORY ID: SA29483

VERIFY ADVISORY: http://secunia.com/advisories/29483/

CRITICAL: Highly critical

IMPACT: Spoofing, System access

SOFTWARE: Safari for Windows 3.x: http://secunia.com/product/17978/

DESCRIPTION: Juan Pablo Lopez Yacubian has discovered two vulnerabilities in Safari, which can be exploited by malicious people to conduct spoofing attacks or potentially compromise a user's system. The vulnerabilities are confirmed in version 3.1 for Windows. Other versions may also be affected.


1) An error when downloading e.g. a .ZIP file with an overly long filename can be exploited to cause a memory corruption. Successful exploitation may allow execution of arbitrary code.

2) An error in the handling of windows can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar.

SOLUTION: Do not browse untrusted web sites.

PROVIDED AND/OR DISCOVERED BY: Juan Pablo Lopez Yacubian

ORIGINAL ADVISORY:
http://archives.neohapsis.com/archives/bugtraq/2008-03/0332.html
http://archives.neohapsis.com/archives/bugtraq/2008-03/0324.html
 
 
click Related        click Share
 
News ©

Site Info v2.2.2

Last SeenLast Seen
Server TrafficServer Traffic
  • Total: 346,354,162
  • Today: 9,166
Server InfoServer Info
  • Jan 22, 2018
  • 04:37 am PST
 
 

Daily Inspiration