WebKit as used in Apple Safari before 5.0.4 and iOS before 4.3 does not properly handle unspecified \cached resources \ which allows remote attackers to cause a denial of service (resource unavailability) via a crafted web site that conducts a cache-poisoning attack.