Description
Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption.
References
- http://support.apple.com/kb/HT1467
- ADV-2008-0979 vdb-entry
- APPLE-SA-2008-04-16 vendor-advisory
- VU#529441 third-party-advisory
- apple-safari-filedownload-code-execution(41864) vdb-entry
- 28813 vdb-entry
- 1019868 vdb-entry