Vulnerability Details CVE-2004-1199
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.5%
CVSS Severity
CVSS v2 Score 5.0
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html
- http://www.securityfocus.com/bid/11759
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18282
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html
- http://www.securityfocus.com/bid/11759
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18282
Products affected by CVE-2004-1199
-
cpe:2.3:a:apple:safari:1.0
-
cpe:2.3:a:apple:safari:1.1
-
cpe:2.3:a:apple:safari:1.2
-
cpe:2.3:a:apple:safari:1.2.1
-
cpe:2.3:a:apple:safari:1.2.2
-
cpe:2.3:a:apple:safari:1.2.3
-
cpe:2.3:a:apple:safari:beta2