Monday, March 24, 2008 10:20 AM
cmosby
Safari Address Bar Spoofing and Memory Corruption Vulnerabilities - Advisories - Secunia
Safari Address Bar Spoofing and Memory Corruption Vulnerabilities
Secunia Advisory:
SA29483
Release Date:
2008-03-24
Critical:
Highly critical
Impact:
Spoofing
System access
Where:
From remote
Solution Status:
Unpatched
Software:
Safari for Windows 3.x
Description:
Juan Pablo Lopez Yacubian has discovered two vulnerabilities in Safari, which can be exploited by malicious people to conduct spoofing attacks or potentially compromise a user's system.
1) An error when downloading e.g. a .ZIP file with an overly long filename can be exploited to cause a memory corruption.
Successful exploitation may allow execution of arbitrary code.
2) An error in the handling of windows can be exploited to display arbitrary content while showing the URL of a trusted web site in the address bar.
The vulnerabilities are confirmed in version 3.1 for Windows. Other versions may also be affected.
Solution:
Do not browse untrusted web sites.
Provided and/or discovered by:
Juan Pablo Lopez Yacubian
Original Advisory:
http://archives.neohapsis.com/archives/bugtraq/2008-03/0332.html
http://archives.neohapsis.com/archives/bugtraq/2008-03/0324.html