CVE-2008-2307 Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of s...
HighCVSS 9.3
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple Safari | <= 3.1.1 | No fix listed |
| apple Safari | = 3.0 | No fix listed |
| apple Safari | = 3.0.1 | No fix listed |
| apple Safari | = 3.0.2 | No fix listed |
| apple Safari | = 3.0.3 | No fix listed |
| apple Safari | = 3.0.4 | No fix listed |
| apple Safari | = 3.1 | No fix listed |
References
- APPLE-SA-2008-07-11 vendor-advisory
- APPLE-SA-2008-06-19 patch vendor-advisory
- APPLE-SA-2008-06-30 vendor-advisory
- 30775 third-party-advisory vendor-advisory
- 30801 third-party-advisory vendor-advisory
- 30992 third-party-advisory vendor-advisory
- 31074 third-party-advisory vendor-advisory
- support.apple.com
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- VU#361043 third-party-advisory us-government-resource
- 29836 patch vdb-entry
- 1020330 vdb-entry
- ADV-2008-1882 vdb-entry vendor-advisory
- ADV-2008-1980 vdb-entry vendor-advisory
- ADV-2008-1981 vdb-entry vendor-advisory
- ADV-2008-2094 vdb-entry vendor-advisory
- FEDORA-2008-6186 vendor-advisory
- FEDORA-2008-6220 vendor-advisory