Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple safari 3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-1026
Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari prior to 3.1.1, allows remote malicious users to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers...
Apple Safari 3Apple Safari 3.1
NA
CVE-2008-1024
Apple Safari prior to 3.1.1, when running on Windows XP or Vista, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption.
Apple Safari 3Apple Safari 3.1
NA
CVE-2008-3623
Heap-based buffer overflow in CoreGraphics in Apple Safari prior to 3.2 on Windows, in iPhone OS 1.0 up to and including 2.2.1, and in iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to execute arbitrary code or cause a denial of service (appl...
Apple SafariApple Safari 0.8Apple Safari 1.2Apple Safari 1.2.1Apple Safari 1.3.2Apple Safari 2Apple Safari 2.0.4 419.3Apple Safari 2.0 PreApple Safari 3.0.3Apple Safari 0.9Apple Safari 1.0Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 2.0Apple Safari 2.0.1Apple Safari 3Apple Safari 3.0Apple Safari 3.0.4Apple Safari 3.0.4 BetaApple Safari 1.1Apple Safari 1.1.1Apple Safari 1.3
NA
CVE-2008-3644
Apple Safari prior to 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache.
Apple SafariApple Safari 1.0Apple Safari 1.3Apple Safari 1.3.1Apple Safari 2.0.3 417.9.3Apple Safari 2.0.4Apple Safari 3.0.2Apple Safari 3.0.3Apple Safari 3.1.1Apple Safari 1.1Apple Safari 0.8Apple Safari 1.1.1Apple Safari 1.2.1Apple Safari 1.3.2Apple Safari 2Apple Safari 2.0.4 419.3Apple Safari 2.0 PreApple Safari 3.0.4Apple Safari 1.0.3Apple Safari 1.2Apple Safari 1.2.4Apple Safari 1.2.5
NA
CVE-2008-4216
The plug-in interface in WebKit in Apple Safari prior to 3.2 does not prevent plug-ins from accessing local URLs, which allows remote malicious users to obtain sensitive information via vectors that "launch local files."
Apple Safari 1.0Apple Safari 1.1.1Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0.4Apple Safari 2.0.4 419.3Apple Safari 3.0.3Apple Safari 1.1Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 2Apple Safari 2.0Apple Safari 2.0 PreApple Safari 3Apple Safari 1.2.5Apple Safari 1.3Apple Safari 2.0.3Apple Safari 2.0.3 417.9.3Apple Safari 3.0.2
NA
CVE-2007-3186
Apple Safari Beta 3.0.1 for Windows allows remote malicious users to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI.
Apple Safari 3.0Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 2.0.3Apple Safari 2.0.4Apple SafariApple Safari 2.0
NA
CVE-2009-0162
Cross-site scripting (XSS) vulnerability in Safari prior to 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 prior to 10.5.7 and Windows allows remote malicious users to inject arbitrary web script or HTML via a crafted feed: URL.
Apple Safari 1.0Apple Safari 1.0.0b1Apple Safari 1.2Apple Safari 1.0.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 2Apple Safari 2.0.3Apple Safari 3.0Apple Safari 3.0.0Apple Safari 3.1.1Apple Safari 3.1.2Apple Safari 1.0.1Apple Safari 1.0.0b2Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 2.0.4Apple Safari 3Apple Safari 3.1.0Apple Safari 3.1
NA
CVE-2009-0945
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari prior to 3.2.3 and 4 Public Beta, iPhone OS 1.0 up to and including 2.2.1, iPhone OS for iPod touch 1.1 up to and including 2.2.1, Google Chrome Stable prior to 1.0.154.65, and possibly other prod...
Apple Safari 0.9Apple Safari 1.0.2Apple Safari 1.1.0Apple Safari 1.1Apple Safari 0.8Apple Safari 1.0.3Apple Safari 1.0.0Apple Safari 1.2.0Apple Safari 1.1.1Apple Safari 1.3.0Apple Safari 1.3.2Apple Safari 1.3Apple Safari 2.0.3Apple Safari 3.0.1Apple Safari 3.0.2Apple Safari 3.2Apple Safari 3.2.0Apple Safari 1.0Apple Safari 1.0.0b1Apple Safari 1.2Apple Safari 1.2.4Apple Safari 1.2.5
NA
CVE-2011-0216
Off-by-one error in libxml in Apple Safari prior to 5.0.6 allows remote malicious users to execute arbitrary code or cause a denial of service (heap-based buffer overflow and application crash) via a crafted web site.
Apple Safari 2.0.1Apple Safari 1.2.2Apple Safari 2.0.2Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 1.0.0Apple Safari 2.0.3Apple Safari 2.0.4Apple Safari 2.0Apple Safari 1.1Apple Safari 3.2.1Apple Safari 3.1.0Apple Safari 3.0.4bApple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.5Apple Safari 1.3Apple Safari 3.0Apple Safari 3.0.3Apple Safari 5.0Apple Safari 1.3.2
NA
CVE-2011-0217
Apple Safari prior to 5.0.6 provides AutoFill information to scripts that execute before HTML form submission, which allows remote malicious users to obtain Address Book information via a crafted form, as demonstrated by a form that includes non-visible fields.
Apple Safari 1.3.1Apple Safari 1.2.2Apple Safari 1.3.2Apple Safari 1.1.1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 5.0.1Apple Safari 2.0.4Apple Safari 3.0.3bApple Safari 2Apple Safari 3.1.1Apple Safari 3.0.1bApple Safari 3.1.0bApple Safari 3.1.0Apple Safari 3.1.2Apple Safari 5.0.4Apple Safari 2.0.1Apple Safari 2.0.3Apple Safari 1.3.0Apple Safari 1.0.3Apple Safari 1.0.2Apple Safari 1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook