# Exploit Title: Bad "VML" Remote DoS on Safari for iPhone & iPod Touch # Date: 26/03/2010 # Author: Nishant Das Patnaik # For more of Nishant's research, please visit: # http://nishantdaspatnaik.yolasite.com/research.php # Tested on: iPod Touch 3G (iPhone OS 3.1.3) # Description: An attacker may direct the user to visit a specially crafted webpage that can lead the Safari browser on iPhone & iPod Touch running iPhone OS 3.1.3 to freeze and finally crash. The attacker can modify to the PoC to run arbitrary code on the device. # Code: ---------PoC STARTS HERE---------------- Bad "VML" Remote DoS on Safari for iPhone & iPod Touch ---------POC ENDS HERE----------------