First published: Tue Nov 29 2005(Updated: )
Apple Safari 2.0.2 allows remote attackers to cause a denial of service (system slowdown) via a Javascript BODY onload event that calls the window function.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mobile Safari | =2.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2005-3897 is considered to be moderate, as it can cause a denial of service.
To fix CVE-2005-3897, upgrade to a newer version of Apple Safari that does not have this vulnerability.
CVE-2005-3897 specifically affects Apple Safari version 2.0.2.
CVE-2005-3897 involves a denial of service attack resulting from a malicious Javascript onload event.
Yes, CVE-2005-3897 can be exploited remotely by delivering malicious JavaScript to the victim's browser.