About | ACP | Buy | Forum | Industry Watch | Learning Curve | Search | Twitter | Xnews
Home » Industry Watch » Safari KHTMLParser::popOneBlock

Safari KHTMLParser::popOneBlock: Test It Yourself

A new bug in Apple's web browser causes it to crash and may lead to arbitrary code execution.


Discovered by Jose Avila, the following bug was tested on the latest version of Safari on 31 July 2006 on a fully patched 10.4 PPC system. Safari will dereference and call a pointer from the heap if a script element inside a div element redefines the document body.

If you're on this page and have JavaScript enabled, you are not vulnerable.

About | ACP | Buy | Forum | Industry Watch | Learning Curve | Search | Twitter | Xnews
Copyright © Rixstep. All rights reserved.