CVE-2007-3376 Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTM...
HighCVSS 9.3
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | = 3.0.2 | No fix listed |
References
- 20070625 Safari Bookmarks Buffer Overflow Vulnerability exploit mailing-list
- 40882 vdb-entry
- 20070624 Safari Bookmarks Buffer Overflow Vulnerability mailing-list
- 24619 vdb-entry
- ADV-2007-2340 vdb-entry
- safari-title-bo(35030) vdb-entry