This application requires Javascript for optimal performance.

DHTML.Malicious.Table.Elements.Remote.Code.Execution

Release Date

Jun 25, 2009

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a code execution vulnerability in
Apple Safari.
The vulnerability is caused by an error when the vulnerable software handles
some DHTML objects. It allows a remote attacker to execute arbitrary code via sending a crafted web page.

Affected Products

Apple Safari 3.1.2 for Windows

Recommended Actions

Currently we are not aware of any vendor supplied patch for this issue.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2008-4231

Reference/s

http://www.securityfocus.com/bid/32394 (BugTraq)

Reference: VID-16012