VDB
CVE-2007-3376
CVE-2007-3376
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark.
EPSS 5.54% · 92.5th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
5.54%
92.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| apple | safari | 3.0.2 |
Timeline
- Jun 25, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Apr 4, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 9, 2023 EPSS Score
- Dec 24, 2023 EPSS Score
References
- 20070625 Safari Bookmarks Buffer Overflow Vulnerability mailing-list
- 20070624 Safari Bookmarks Buffer Overflow Vulnerability mailing-list
- 40882 vdb
- 24619 vdb
- ADV-2007-2340 vdb
- safari-title-bo(35030) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2007-3376 advisory