Packet Storm Advisory 2013-0903-1 – Apple Safari Heap Buffer Overflow

Apple Safari Heap Buffer Overflow vulnerability exists within WebKit’s JavaScriptCore JSArray::sort() method. This method accepts the user-defined.JavaScript function and calls it from the native code to compare array items. If this compare function reduces array length, then the trailing array items will be written outside the “m_storage->m_vector. buffer, which leads to the. heap memory corruption. The full exploit code is available here: http://packetstormsecurity.com//123088/html.”]

Source: https://packetstormsecurity.com/files/123089/Packet-Storm-Advisory-2013-0903-1-Apple-Safari-Heap-Buffer-Overflow.html