Description
Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that triggers an out-of-bounds access, possibly due to a NULL pointer dereference.
References
- ADV-2008-1347 vdb-entry
- apple-safari-file-dos(41984) vdb-entry
- http://es.geocities.com/jplopezy/pruebasafari3.html
- 20080422 Safari 3.1.1 Multiple Vulnerabilities for windows mailing-list
- 3833 third-party-advisory