CVE-2007-3284

Apple Safari 3.0.1 (552.12.2) for Windows - Denial of Service via History Form Handling

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3284. PoCs published by Lostmon.

AI-analyzed exploit summary This HTML PoC exploits a denial-of-service vulnerability in Apple Safari for Windows by manipulating form inputs, causing the browser to crash. The exploit leverages malformed user-supplied input to trigger the vulnerability.

Description

corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (crash) via certain forms that trigger errors related to History, possibly involving multiple form fields with the same name.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Lostmon · htmldoswindows

https://www.exploit-db.com/exploits/30193

View Code ZIP pw:eip

This HTML PoC exploits a denial-of-service vulnerability in Apple Safari for Windows by manipulating form inputs, causing the browser to crash. The exploit leverages malformed user-supplied input to trigger the vulnerability.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: Apple Safari 3.0.1 beta for Windows

No auth needed

Prerequisites: Victim must open the maliciously crafted HTML document in Safari 3.0.1 beta for Windows

MITRE ATT&CK

T1499 - Endpoint Denial of Service

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Various Sources x_refsource_misc

http://lostmon.blogspot.com/2007/06/safari-301-552122-for-windows.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/38869

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/24497

Scores

EPSS 0.0308

EPSS Percentile 85.9%

Details

Status published

Products (1)

apple/safari 3.0.1

Published Jun 19, 2007

Tracked Since Feb 18, 2026