6.8
CVSSv2

CVE-2008-1026

Published: 17/04/2008 Updated: 11/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Integer overflow in the PCRE regular expression compiler (JavaScriptCore/pcre/pcre_compile.cpp) in Apple WebKit, as used in Safari prior to 3.1.1, allows remote malicious users to execute arbitrary code via a regular expression with large, nested repetition counts, which triggers a heap-based buffer overflow.

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari 3

apple safari 3.1