CVE-2007-3274
Apple Safari 3.0 and 3.0.1 - Denial of Service via JavaScript document.location Manipulation
Title source: llmDescription
Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38863
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/2810
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/471542/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34912
Scores
EPSS
0.0101
EPSS Percentile
59.7%
Details
CWE
CWE-399
Status
published
Products (2)
apple/safari
3.0
apple/safari
3.0.1
Published
Jun 19, 2007
Tracked Since
Feb 18, 2026