full-disclosure - safari dos

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3FBF4A7C.2070301@insecure.ws>
From: kang at insecure.ws (kang@...ecure.ws)
Subject: safari dos

Christian Horchert wrote:

> Am 22.11.2003 um 01:58 schrieb kang@...ecure.ws:
>
>> Original is here: 
>> http://www.insecure.ws/article.php?story=20031122012748282
>
>
>> Safari will never exit a loop in javascript. Since javascript isn't 
>> executed in a thread, this cause a DoS (Safari crashes).
>> Firebird has been tested and is not vulnerable. I don't know about 
>> other browers on MacOSX, but they are probably not vulnerable. 
>> (OmniWeb?)
>
>
> BBEdit ate cpu while previewing.
> Mhhh... aren't there quite a couple of programmes utelizing the 
> foundation :-\
>
>   Christian

Sherlock uses it too, I believe a few other also. It seems to me that 
iTunes only uses an xml engine, but not the webkit. (No webkit calls, 
etc, I'm positive that itunes doesn't uses it)