Lucene search
MitreCVE-2004-1199HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1199
2005-01-1005:00:00
mitre
web.nvd.nist.gov
27
cve-2004-1199
safari 1.2.4
denial of service
memory exhaustion
mac os x 10.3.6
javascript code
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
High
EPSS
0.012
Percentile
84.9%
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
Affected configurations
Node
applesafariMatch1.0
ORapplesafariMatch1.1
ORapplesafariMatch1.2
ORapplesafariMatch1.2.1
ORapplesafariMatch1.2.2
ORapplesafariMatch1.2.3
ORapplesafariMatchbeta2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | 1.0 | cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:* |
| apple | safari | 1.1 | cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:* |
| apple | safari | 1.2 | cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:* |
| apple | safari | 1.2.1 | cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:* |
| apple | safari | 1.2.2 | cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:* |
| apple | safari | 1.2.3 | cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:* |
| apple | safari | beta2 | cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:* |
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
7.2
Confidence
High
EPSS
0.012
Percentile
84.9%
Related for CVE-2004-1199