CVE-2009-3272

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.

Affected products

Safari, Webkit

Apple Safari

= 3.2.3, 4.0, 4.0.0b, 4.0.2, 4.0.3

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

6.4% (93th percentile)

Weakness

CWE-399

NVD status

Modified

Published

2009-09-21