CVE-2011-0133

Related Files

Zero Day Initiative Advisory 11-099

Posted Mar 3, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-099 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way the application handles floating blocks in certain situations. When performing layout operations for a floating block produced by a pseudo-element, the application will attempt to access glyph data that hasn't been fully assigned into the glyph data hashmap. Due to this type being incomplete, this can lead to code execution under the context of the application.

tags | advisory, remote, arbitrary, code execution

systems | apple

advisories | CVE-2011-0133

SHA-256 | 0bc533335809df4a9517760a808b2d7ea9a75bb5c2e383c1786a4c266efe8f50

Download | Favorite | View