Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-1131 — Apple Safari vulnerability

4 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
1.6%
top 18.39%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apple Safari
Timeline
PublishedMar 27
Latest updateMay 2

Description

JavaScriptCore.dll, as used in Apple Safari 4.0.5 on Windows XP SP3, allows remote attackers to cause a denial of service (application crash) via an HTML document composed of many successive occurrences of the substring.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDapple/safari4.0.5

🔴Vulnerability Details

1
GHSA
GHSA-2gr5-vg95-v4pw: JavaScriptCore↗2022-05-02
▶

💥Exploits & PoCs

2
Exploit-DB
Apple Safari 4.0.5 - 'JavaScriptCore.dll' Stack Exhaustion↗2010-05-03
▶
Exploit-DB
Apple Safari 4.0.5 - Object Tag 'JavaScriptCore.dll' Crash (Denial of Service)↗2010-03-22
▶