Description
The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a "high-bit character" in a URL fragment for an unspecified protocol.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504479/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/35481
Scores
EPSS
0.0250
EPSS Percentile
82.9%
Details
CWE
CWE-20
Status
published
Products (1)
apple/safari
3.2.3 (2 CPE variants)
Published
Jul 09, 2009
Tracked Since
Feb 18, 2026