New Denial-of-Service Exploit Found In Mobile Safari

Radware's Security Operations Center is claiming to have discovered a new Denial-of-Serivce vulnerability in the iPhone's Mobile Safari web browser in the 1.1.4 firmware. The exploit would require that a user click on a link to a web page containing Javascript that triggers the vulnerability, causing Safari to crash.

Apple iPhone Safari browser is vulnerable to DoS attacks due to a design flaw that may be triggered by a series of memory allocation operations on the dynamic memory pool, which in turn triggers a bug in the garbage collector. The security hole is currently unpatched, leaving iPhone owners vulnerable to potential attacks until Apple issues a security update.

Apple has yet to comment.