Description
Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
References
- http://www.fortiguardcenter.com/advisory/FGA-2009-23.html
- APPLE-SA-2009-06-08-1 vendor-advisory
- APPLE-SA-2008-11-20 vendor-advisory
- ADV-2009-1522 vdb-entry
- ADV-2008-3232 vdb-entry
- 35379 third-party-advisory
- 20090610 FortiGuard Advisory: Apple Safari Remote Memory Corruption Vulnerability mailing-list
- http://support.apple.com/kb/HT3318
- 1021272 vdb-entry
- 50028 vdb-entry
- 32394 vdb-entry
- http://support.apple.com/kb/HT3613
- 32756 third-party-advisory