First published: Tue Jun 19 2007(Updated: )
Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows XP | =sp2 | |
Apple Mobile Safari | =3.0 | |
Apple Mobile Safari | =3.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-3274 has a medium severity rating due to its potential to cause application crashes.
To fix CVE-2007-3274, upgrade to the latest version of Apple Safari that resolves this vulnerability.
CVE-2007-3274 affects Apple Safari versions 3.0 and 3.0.1.
Yes, CVE-2007-3274 can be exploited remotely via malicious JavaScript.
CVE-2007-3274 specifically impacts Safari running on Windows XP SP2.