CVE-2004-1199

Published: Jan 10, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.

Affected (7)

Products: Apple: Safari

Apple

1 product

Safari

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Version 1.0
Apple Safari	Version 1.1
Apple Safari	Version 1.2.1
Apple Safari	Version 1.2.2
Apple Safari	Version 1.2.3
Apple Safari	Version 1.2
Apple Safari	Version beta2

References (6)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/11759

Source: cve@mitre.org

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18282

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/11759

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/18282

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.