SillyDog701

[J-M]

Information about new advisory has been relased at
http://www.frsirt.com/english/advisories/2006/2671

From the advisory:

A vulnerability has been identified in Apple Safari, which could be exploited by attackers to cause a denial of service. This flaw is due to a NULL pointer dereference error when handling a specially crafted DHTML "setAttributeNode()" method, which could be exploited by attackers to crash a vulnerable browser by tricking a user into visiting a malicious web page.

Advisory states version 2.0.4 (419.3) and earlier as affected.
Antony and others, is this the newest available (probably yes).

J-M: edited to fix two typos.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

[J-M]

Okay, the original name of the security issue is Apple Safari DHTML "setAttributeNode" Method Remote Denial of Service Vulnerability.
Word 'vulnera' was used due to limitations of Subject field

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4

[Antony]

thanks for reporting. I hope Apple will release an update shortly.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/418.8 (KHTML, like Gecko) Safari/419.3

[J-M]

Probably they don't release a separate Safari update before the next security update packages, however.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4