CVE-2008-1026

Related Files

Zero Day Initiative Advisory 08-022

Posted Apr 16, 2008

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in WebKit. When nesting regular expressions with large repetitions, a heap overflow occurs resulting in a condition allowing the execution of arbitrary code.

tags | advisory, remote, overflow, arbitrary

systems | apple

advisories | CVE-2008-1026

SHA-256 | d7226cf9fbed0e7b5e82d1dd575f6e61f1ded367886e94e1a5db1549689e7f83

Download | Favorite | View