CVE-2004-1199: Medium severity apple safari vulnerability
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1199?
CVE-2004-1199 is classified as a denial of service vulnerability which can cause application crashes.
How do I fix CVE-2004-1199?
To mitigate CVE-2004-1199, users should update to a later version of Safari that addresses this issue.
What software is affected by CVE-2004-1199?
CVE-2004-1199 affects several versions of Safari, including 1.0, 1.1, 1.2, and 1.2.4 on Mac OS X.
How does CVE-2004-1199 exploit memory exhaustion?
CVE-2004-1199 exploits memory exhaustion by using JavaScript to create and sort continuously nested arrays.
Is there a workaround for CVE-2004-1199?
A temporary workaround for CVE-2004-1199 may involve disabling JavaScript in Safari until an update is applied.