First published: Tue Sep 11 2007(Updated: )
Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact by setting document.location.hash to a long string. NOTE: the crash might actually occur in the alert method.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mobile Safari | =3.0.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-4812 is classified as a high severity vulnerability due to its potential to cause a denial of service.
To fix CVE-2007-4812, upgrade your Apple Safari browser to version 3.0.4 or later.
CVE-2007-4812 can be exploited through specially crafted web content that triggers a buffer overflow.
Exploitation of CVE-2007-4812 can lead to crashes of the Safari browser and potential system instability.
CVE-2007-4812 affects Apple Safari versions prior to 3.0.4, including 3.0.3.