Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2009-1233 — Improper Input Validation in Apple Safari

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
3.1%
top 13.18%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apple Safari
Timeline
PublishedApr 2
Latest updateMay 2

Description

Apple Safari 3.2.2 and 4 Beta on Windows allows remote attackers to cause a denial of service (application crash) via an XML document containing many nested A elements.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/safari3.2.2, 4+1

🔴Vulnerability Details

1
GHSA
GHSA-f4qw-q2x4-xgmh: Apple Safari 3↗2022-05-02
▶

💥Exploits & PoCs

1
Exploit-DB
Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash↗2009-03-31
▶