exploits , vulnerabilities , articles , Apple Safari WebKit JavaScript Arrays Remote Buffer Overflow Vulnerability

Title	Apple Safari WebKit JavaScript Arrays Remote Buffer Overflow Vulnerability
Published	2008-06-19-12:00AM
Updated	2008-07-01-02:30AM
Class	Boundary Condition Error
CVE	CVE-2008-2307
Remote	Yes
Local	No
Credit	James Urquhart
Vulnerable	WebKit Open Source Project WebKit 0 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Apple Safari 3.0.3 Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple Safari 3 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable	Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Mac OS X Server 10.5.4 Apple Mac OS X 10.5.4
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2008-09-06 Computer Associates Products Message Engine RPC Server Multiple Buffer Overflow Vulnerabilities
2008-09-05 NetBSD ICMPv6 MLD Packet Remote Denial of Service Vulnerability
2008-09-05 Drupal Content Creation Kit Module Multiple HTML Injection Vulnerabilities
2008-09-05 HP OpenView Select Identity Connectors Local Information Disclosure Vulnerability
2008-09-05 eZoneScripts Dating Website Remote File Upload Vulnerability
2008-09-05 MicroTik RouterOS SNMP Security Bypass Vulnerability
2008-09-04 Dnsmasq DCHP Lease Multiple Remote Denial Of Service Vulnerabilities
2008-09-04 Zen Cart Multiple SQL Injection Vulnerabilities
2008-09-04 NETGEAR WN802T Wireless Access Point EAPoL Key Length Denial of Service Vulnerability
2008-09-04 Atheros Communications AR5416-AC1E Information Element Denial of Service Vulnerability