CVE-2008-2307
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.3%
exploitation probability
7.3%top 6% of all CVEs
observed exploitation
nono source reports it
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
Affected products
n/a · n/aReferences
http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2008//Jun/msg00001.htmlhttp://lists.apple.com/archives/security-announce/2008//Jun/msg00003.htmlhttp://secunia.com/advisories/30775http://secunia.com/advisories/30801http://secunia.com/advisories/30992http://secunia.com/advisories/31074http://support.apple.com/kb/HT2092http://support.apple.com/kb/HT2163http://support.apple.com/kb/HT2165https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00279.htmlhttps://www.redhat.com/archives/fedora-package-announce/2008-July/msg00319.html