Vulnerabilities > CVE-2009-0070 - Numeric Errors vulnerability in Apple Safari
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
| description | Safari (Arguments) Array Integer Overflow PoC (New Heap Spray). CVE-2009-0070. Dos exploits for multiple platform |
| file | exploits/multiple/dos/7673.html |
| id | EDB-ID:7673 |
| last seen | 2016-02-01 |
| modified | 2009-01-05 |
| platform | multiple |
| port | |
| published | 2009-01-05 |
| reporter | Skylined |
| source | https://www.exploit-db.com/download/7673/ |
| title | Safari Arguments Array Integer Overflow PoC New Heap Spray |
| type | dos |