CVE-2008-2307

CRITICAL 9.3CVE-2008-2307 · Published 23/06/2008 · updated 16/06/2026

In short

CVE-2008-2307 is a CRITICAL (CVSS 9.3) vulnerability affecting safari (apple).
Chance of exploitation in the next 30 days (EPSS): 7.3%, higher than 94.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
safari apple	`= 3.0= 3.0.1= 3.0.2= 3.0.3= 3.0.4= 3.1≤ 3.1.1`	No fix yet

Description

Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.

References

lists.apple.com/archives/security-announce/2008//Jul/msg00001.html · Vendor Advisory
lists.apple.com/archives/security-announce/2008//Jun/msg00001.html · Patch
lists.apple.com/archives/security-announce/2008//Jun/msg00003.html
secunia.com/advisories/30775 · Vendor Advisory
secunia.com/advisories/30801 · Vendor Advisory
secunia.com/advisories/30992 · Vendor Advisory
secunia.com/advisories/31074 · Vendor Advisory
support.apple.com/kb/HT2092
support.apple.com/kb/HT2163 · Vendor Advisory
support.apple.com/kb/HT2165 · Vendor Advisory
kb.cert.org/vuls/id/361043 · US Government Resource
securityfocus.com/bid/29836 · Patch
securitytracker.com/id
vupen.com/english/advisories/2008/1882/references · Vendor Advisory
vupen.com/english/advisories/2008/1980 · Vendor Advisory
vupen.com/english/advisories/2008/1981/references · Vendor Advisory
vupen.com/english/advisories/2008/2094/references · Vendor Advisory
redhat.com/archives/fedora-package-announce/2008-July/msg00279.html
redhat.com/archives/fedora-package-announce/2008-July/msg00319.html

More vulnerabilities in safari

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free