CVE-2007-3376 - Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cau

CVE-2007-3376

Summary

Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark.

References

Vulnerable Configurations

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

bid	24619
bugtraq	20070624 Safari Bookmarks Buffer Overflow Vulnerability
fulldisc	20070625 Safari Bookmarks Buffer Overflow Vulnerability
osvdb	40882
vupen	ADV-2007-2340
xf	safari-title-bo(35030)

Last major update

29-07-2017 - 01:32

Published

25-06-2007 - 20:30

Last modified

29-07-2017 - 01:32