{"id": "VU:529441", "bulletinFamily": "info", "title": "Apple Safari fails to properly handle a file name", "description": "### Overview\n\nA vulnerabilty in Apple Safari handles specially crafted file name may allow execution of arbitrary code or denial of service.\n\n### Description\n\nAccording to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>): \n\n_A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. _ \n \nNote that this issue only affects Safari on Windows XP or Vista. \n \n--- \n \n### Impact\n\nA remote, unauthenticated attacker may be able to execute arbitrary code. \n \n--- \n \n### Solution\n\n**Apply Apple Updates** \nApple has released an update to address this vulnerability. Refer to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>). \n \n--- \n \n**Disable Open \u201csafe\u201d files after downloading option** \n \nFor instructions on how to disable the Open \u201csafe\u201d files after downloading option in Safari, please refer to the Safari section of the [Securing Your Web Browser](<http://www.us-cert.gov/reading_room/securing_browser/#sgeneral>) document. \n \n**Do not access files from untrusted sources** \n \nDo not download files from unknown or untrusted sources. Do not open unfamiliar or unexpected links, particularly those delivered in email messages. Please see Cyber Security Tip [ST04-014](<http://www.us-cert.gov/cas/tips/ST04-014.html>)[](<http://www.us-cert.gov/cas/tips/ST04-010.html>). \n \n--- \n \n### Systems Affected \n\nVendor| Status| Date Notified| Date Updated \n---|---|---|--- \nApple Computer, Inc.| | -| 18 Apr 2008 \nIf you are a vendor and your product is affected, [let us know](<mailto:cert@cert.org?Subject=VU%23529441 Vendor Status Inquiry>).\n\n### CVSS Metrics \n\nGroup | Score | Vector \n---|---|--- \nBase | N/A | N/A \nTemporal | N/A | N/A \nEnvironmental | N/A | N/A \n \n### References\n\n * <http://support.apple.com/kb/HT1467>\n\n### Credit\n\nThis issue is addressed by Apple Safari 3.1.1 . \n\nThis document was written by Chris Taschner.\n\n### Other Information\n\n * CVE IDs: [CVE-2008-1024](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024>)\n * Date Public: 16 Apr 2008\n * Date First Published: 18 Apr 2008\n * Date Last Updated: 18 Apr 2008\n * Severity Metric: 13.11\n * Document Revision: 12\n\n", "published": "2008-04-18T00:00:00", "modified": "2008-04-18T00:00:00", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.kb.cert.org/vuls/id/529441", "reporter": "CERT", "references": ["http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://www.us-cert.gov/reading_room/securing_browser/#sgeneral", "http://www.us-cert.gov/cas/tips/ST04-010.html", "http://www.us-cert.gov/cas/tips/ST04-014.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024"], "cvelist": ["CVE-2008-1024", "CVE-2008-1024"], "type": "cert", "lastseen": "2018-08-31T02:37:48", "history": [{"bulletin": {"bulletinFamily": "info", "cvelist": ["CVE-2008-1024", "CVE-2008-1024"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "### Overview\n\nA vulnerabilty in Apple Safari handles specially crafted file name may allow execution of arbitrary code or denial of service.\n\n### Description\n\nAccording to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>): \n\n_A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. _ \n \nNote that this issue only affects Safari on Windows XP or Vista. \n \n--- \n \n### Impact\n\nA remote, unauthenticated attacker may be able to execute arbitrary code. \n \n--- \n \n### Solution\n\n**Apply Apple Updates** \nApple has released an update to address this vulnerability. Refer to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>). \n \n--- \n \n**Disable Open \u201csafe\u201d files after downloading option** \n \nFor instructions on how to disable the Open \u201csafe\u201d files after downloading option in Safari, please refer to the Safari section of the [Securing Your Web Browser](<http://www.us-cert.gov/reading_room/securing_browser/#sgeneral>) document. \n \n**Do not access files from untrusted sources** \n \nDo not download files from unknown or untrusted sources. Do not open unfamiliar or unexpected links, particularly those delivered in email messages. Please see Cyber Security Tip [ST04-014](<http://www.us-cert.gov/cas/tips/ST04-014.html>)[](<http://www.us-cert.gov/cas/tips/ST04-010.html>). \n \n--- \n \n### Systems Affected \n\nVendor| Status| Date Notified| Date Updated \n---|---|---|--- \nApple Computer, Inc.| | -| 18 Apr 2008 \nIf you are a vendor and your product is affected, [let us know](<mailto:cert@cert.org?Subject=VU%23529441 Vendor Status Inquiry>).\n\n### CVSS Metrics \n\nGroup | Score | Vector \n---|---|--- \nBase | N/A | N/A \nTemporal | N/A | N/A \nEnvironmental | N/A | N/A \n \n### References\n\n * <http://support.apple.com/kb/HT1467>\n\n### Credit\n\nThis issue is addressed by Apple Safari 3.1.1 . \n\nThis document was written by Chris Taschner.\n\n### Other Information\n\n * CVE IDs: [CVE-2008-1024](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024>)\n * Date Public: 16 Apr 2008\n * Date First Published: 18 Apr 2008\n * Date Last Updated: 18 Apr 2008\n * Severity Metric: 13.11\n * Document Revision: 12\n\n", "edition": 3, "enchantments": {"score": {"value": 9.3, "vector": "NONE"}}, "hash": "678852373d2b409f9614cd52fd9ced29855378a25fbeed50b254fca8883307cf", "hashmap": [{"hash": "cbe706b5e23ff3c20a08248110c05560", "key": "cvelist"}, {"hash": "b6ba9fa6ea18201bf39ea635ecca9f13", "key": "type"}, {"hash": "b66c339c2334763a0f7a67511443e7a6", "key": "references"}, {"hash": "6a11ca37c9139edb39dab611422bb3d8", "key": "modified"}, {"hash": "8b3b4d9ff85c66a0a9baae8072a05bb2", "key": "href"}, {"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "3fcd2984513ad36640a87a1ae83be748", "key": "description"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "6a11ca37c9139edb39dab611422bb3d8", "key": "published"}, {"hash": "1100cef349b0ef1f5ad88da91f7fe73c", "key": "title"}, {"hash": "5d2cfab83ed6e86a4812690790dc7ad5", "key": "reporter"}], "history": [], "href": "https://www.kb.cert.org/vuls/id/529441", "id": "VU:529441", "lastseen": "2018-08-30T20:37:50", "modified": "2008-04-18T00:00:00", "objectVersion": "1.3", "published": "2008-04-18T00:00:00", "references": ["http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://www.us-cert.gov/reading_room/securing_browser/#sgeneral", "http://www.us-cert.gov/cas/tips/ST04-010.html", "http://www.us-cert.gov/cas/tips/ST04-014.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024"], "reporter": "CERT", "title": "Apple Safari fails to properly handle a file name", "type": "cert", "viewCount": 0}, "differentElements": ["cvss"], "edition": 3, "lastseen": "2018-08-30T20:37:50"}, {"bulletin": {"bulletinFamily": "info", "cvelist": ["CVE-2008-1024", "CVE-2008-1024"], "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "### Overview\n\nA vulnerabilty in Apple Safari handles specially crafted file name may allow execution of arbitrary code or denial of service.\n\n### Description\n\nAccording to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>): \n\n_A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. _\n\n \nNote that this issue only affects Safari on Windows XP or Vista. \n \n--- \n \n### Impact\n\nA remote, unauthenticated attacker may be able to execute arbitrary code. \n \n--- \n \n### Solution\n\n**Apply Apple Updates** \nApple has released an update to address this vulnerability. Refer to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>). \n \n--- \n \n**Disable Open \u201csafe\u201d files after downloading option** \n \nFor instructions on how to disable the Open \u201csafe\u201d files after downloading option in Safari, please refer to the Safari section of the [Securing Your Web Browser](<http://www.us-cert.gov/reading_room/securing_browser/#sgeneral>) document. \n \n**Do not access files from untrusted sources** \n \nDo not download files from unknown or untrusted sources. Do not open unfamiliar or unexpected links, particularly those delivered in email messages. Please see Cyber Security Tip [ST04-014](<http://www.us-cert.gov/cas/tips/ST04-014.html>)[](<http://www.us-cert.gov/cas/tips/ST04-010.html>). \n \n--- \n \n### Systems Affected \n\nVendor| Status| Date Notified| Date Updated \n---|---|---|--- \nApple Computer, Inc.| | -| 18 Apr 2008 \nIf you are a vendor and your product is affected, [let us know](<mailto:cert@cert.org?Subject=VU%23529441 Vendor Status Inquiry>).\n\n### CVSS Metrics \n\nGroup | Score | Vector \n---|---|--- \nBase | N/A | N/A \nTemporal | N/A | N/A \nEnvironmental | N/A | N/A \n \n### References\n\n * <http://support.apple.com/kb/HT1467>\n\n### Credit\n\nThis issue is addressed by Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>). \n\nThis document was written by Chris Taschner.\n\n### Other Information\n\n * CVE IDs: [CVE-2008-1024](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024>)\n * Date Public: 16 Apr 2008\n * Date First Published: 18 Apr 2008\n * Date Last Updated: 18 Apr 2008\n * Severity Metric: 13.11\n * Document Revision: 12\n\n", "edition": 1, "enchantments": {"score": {"value": 9.3, "vector": "NONE"}}, "hash": "62472d816d7958420b7582ffe4cbac7c58ca78a3e176f3173dd4201e9d509433", "hashmap": [{"hash": "cbe706b5e23ff3c20a08248110c05560", "key": "cvelist"}, {"hash": "b6ba9fa6ea18201bf39ea635ecca9f13", "key": "type"}, {"hash": "6a11ca37c9139edb39dab611422bb3d8", "key": "modified"}, {"hash": "8b3b4d9ff85c66a0a9baae8072a05bb2", "key": "href"}, {"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "6a11ca37c9139edb39dab611422bb3d8", "key": "published"}, {"hash": "bb985b872b896c29e9854107ba989b27", "key": "references"}, {"hash": "da46f9bec7811f16f92d7916b64870e1", "key": "description"}, {"hash": "737e2591b537c46d1ca7ce6f0cea5cb9", "key": "cvss"}, {"hash": "1100cef349b0ef1f5ad88da91f7fe73c", "key": "title"}, {"hash": "5d2cfab83ed6e86a4812690790dc7ad5", "key": "reporter"}], "history": [], "href": "https://www.kb.cert.org/vuls/id/529441", "id": "VU:529441", "lastseen": "2016-02-03T09:12:21", "modified": "2008-04-18T00:00:00", "objectVersion": "1.2", "published": "2008-04-18T00:00:00", "references": ["http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://www.us-cert.gov/reading_room/securing_browser/#sgeneral", "http://www.us-cert.gov/cas/tips/ST04-010.html", "http://www.us-cert.gov/cas/tips/ST04-014.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024"], "reporter": "CERT", "title": "Apple Safari fails to properly handle a file name", "type": "cert", "viewCount": 0}, "differentElements": ["references", "description"], "edition": 1, "lastseen": "2016-02-03T09:12:21"}, {"bulletin": {"bulletinFamily": "info", "cvelist": ["CVE-2008-1024", "CVE-2008-1024"], "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "description": "### Overview\n\nA vulnerabilty in Apple Safari handles specially crafted file name may allow execution of arbitrary code or denial of service.\n\n### Description\n\nAccording to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>): \n\n_A memory corruption issue exists in Safari's file downloading. By enticing a user to download a file with a maliciously crafted name, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved handling of file downloads. _ \n \nNote that this issue only affects Safari on Windows XP or Vista. \n \n--- \n \n### Impact\n\nA remote, unauthenticated attacker may be able to execute arbitrary code. \n \n--- \n \n### Solution\n\n**Apply Apple Updates** \nApple has released an update to address this vulnerability. Refer to Apple Safari [3.1.1](<http://support.apple.com/kb/HT1467>). \n \n--- \n \n**Disable Open \u201csafe\u201d files after downloading option** \n \nFor instructions on how to disable the Open \u201csafe\u201d files after downloading option in Safari, please refer to the Safari section of the [Securing Your Web Browser](<http://www.us-cert.gov/reading_room/securing_browser/#sgeneral>) document. \n \n**Do not access files from untrusted sources** \n \nDo not download files from unknown or untrusted sources. Do not open unfamiliar or unexpected links, particularly those delivered in email messages. Please see Cyber Security Tip [ST04-014](<http://www.us-cert.gov/cas/tips/ST04-014.html>)[](<http://www.us-cert.gov/cas/tips/ST04-010.html>). \n \n--- \n \n### Systems Affected \n\nVendor| Status| Date Notified| Date Updated \n---|---|---|--- \nApple Computer, Inc.| | -| 18 Apr 2008 \nIf you are a vendor and your product is affected, [let us know](<mailto:cert@cert.org?Subject=VU%23529441 Vendor Status Inquiry>).\n\n### CVSS Metrics \n\nGroup | Score | Vector \n---|---|--- \nBase | N/A | N/A \nTemporal | N/A | N/A \nEnvironmental | N/A | N/A \n \n### References\n\n * <http://support.apple.com/kb/HT1467>\n\n### Credit\n\nThis issue is addressed by Apple Safari 3.1.1 . \n\nThis document was written by Chris Taschner.\n\n### Other Information\n\n * CVE IDs: [CVE-2008-1024](<http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024>)\n * Date Public: 16 Apr 2008\n * Date First Published: 18 Apr 2008\n * Date Last Updated: 18 Apr 2008\n * Severity Metric: 13.11\n * Document Revision: 12\n\n", "edition": 2, "enchantments": {"score": {"value": 9.3, "vector": "NONE"}}, "hash": "0d1ffa4d3ce982e9cb2abff3bd62689158a2f151e811998456f25195c081264d", "hashmap": [{"hash": "cbe706b5e23ff3c20a08248110c05560", "key": "cvelist"}, {"hash": "b6ba9fa6ea18201bf39ea635ecca9f13", "key": "type"}, {"hash": "b66c339c2334763a0f7a67511443e7a6", "key": "references"}, {"hash": "6a11ca37c9139edb39dab611422bb3d8", "key": "modified"}, {"hash": "8b3b4d9ff85c66a0a9baae8072a05bb2", "key": "href"}, {"hash": "caf9b6b99962bf5c2264824231d7a40c", "key": "bulletinFamily"}, {"hash": "3fcd2984513ad36640a87a1ae83be748", "key": "description"}, {"hash": "6a11ca37c9139edb39dab611422bb3d8", "key": "published"}, {"hash": "737e2591b537c46d1ca7ce6f0cea5cb9", "key": "cvss"}, {"hash": "1100cef349b0ef1f5ad88da91f7fe73c", "key": "title"}, {"hash": "5d2cfab83ed6e86a4812690790dc7ad5", "key": "reporter"}], "history": [], "href": "https://www.kb.cert.org/vuls/id/529441", "id": "VU:529441", "lastseen": "2018-08-02T21:55:17", "modified": "2008-04-18T00:00:00", "objectVersion": "1.3", "published": "2008-04-18T00:00:00", "references": ["http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://support.apple.com/kb/HT1467", "http://www.us-cert.gov/reading_room/securing_browser/#sgeneral", "http://www.us-cert.gov/cas/tips/ST04-010.html", "http://www.us-cert.gov/cas/tips/ST04-014.html", "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024"], "reporter": "CERT", "title": "Apple Safari fails to properly handle a file name", "type": "cert", "viewCount": 0}, "differentElements": ["cvss"], "edition": 2, "lastseen": "2018-08-02T21:55:17"}], "edition": 4, "hashmap": [{"key": "bulletinFamily", "hash": "caf9b6b99962bf5c2264824231d7a40c"}, {"key": "cvelist", "hash": "cbe706b5e23ff3c20a08248110c05560"}, {"key": "cvss", "hash": "737e2591b537c46d1ca7ce6f0cea5cb9"}, {"key": "description", "hash": "3fcd2984513ad36640a87a1ae83be748"}, {"key": "href", "hash": "8b3b4d9ff85c66a0a9baae8072a05bb2"}, {"key": "modified", "hash": "6a11ca37c9139edb39dab611422bb3d8"}, {"key": "published", "hash": "6a11ca37c9139edb39dab611422bb3d8"}, {"key": "references", "hash": "b66c339c2334763a0f7a67511443e7a6"}, {"key": "reporter", "hash": "5d2cfab83ed6e86a4812690790dc7ad5"}, {"key": "title", "hash": "1100cef349b0ef1f5ad88da91f7fe73c"}, {"key": "type", "hash": "b6ba9fa6ea18201bf39ea635ecca9f13"}], "hash": "0d1ffa4d3ce982e9cb2abff3bd62689158a2f151e811998456f25195c081264d", "viewCount": 0, "enchantments": {"score": {"value": 9.3, "vector": "NONE"}, "vulnersScore": 9.3}, "objectVersion": "1.3"}

{"cve": [{"lastseen": "2017-08-08T11:24:31", "references": ["http://support.apple.com/kb/HT1467", "https://exchange.xforce.ibmcloud.com/vulnerabilities/41864", "http://www.vupen.com/english/advisories/2008/0979/references", "http://www.kb.cert.org/vuls/id/529441", "http://www.securityfocus.com/bid/28813", "http://www.securitytracker.com/id?1019868", "http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html"], "description": "Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption.", "edition": 2, "reporter": "NVD", "published": "2008-04-17T15:05:00", "title": "CVE-2008-1024", "type": "cve", "enchantments": {"score": {"modified": "2017-08-08T11:24:31", "vector": "NONE", "value": 6.8}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2008-1024"], "scanner": [], "modified": "2017-08-07T21:29:50", "cpe": ["cpe:/a:apple:safari:3", "cpe:/a:apple:safari:3.1"], "id": "CVE-2008-1024", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-1024", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "seebug": [{"lastseen": "2017-11-19T21:43:16", "_object_types": ["robots.models.base.Bulletin", "robots.models.seebug.SeebugBulletin"], "references": [], "enchantments_done": [], "description": "BUGTRAQ ID: 28813,28814,28815\r\nCVE(CAN) ID: CVE-2008-1024,CVE-2008-1025,CVE-2008-1026\r\n\r\nSafari\u662f\u82f9\u679c\u5bb6\u65cf\u64cd\u4f5c\u7cfb\u7edf\u9ed8\u8ba4\u6240\u6346\u7ed1\u7684WEB\u6d4f\u89c8\u5668\u3002 \r\n\r\nSafari\u5b9e\u73b0\u4e0a\u5b58\u5728\u5404\u79cd\u6f0f\u6d1e\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u80fd\u5229\u7528\u8fd9\u4e9b\u6f0f\u6d1e\u63a7\u5236\u7528\u6237\u7cfb\u7edf\u3002\r\n\r\n\u5982\u679c\u7528\u6237\u4f7f\u7528Safari\u4e0b\u8f7d\u4e86\u5e26\u6709\u7279\u5236\u540d\u79f0\u7684\u6587\u4ef6\u7684\u8bdd\uff0c\u5c31\u53ef\u80fd\u89e6\u53d1\u5185\u5b58\u7834\u574f\uff0c\u5bfc\u81f4\u6d4f\u89c8\u5668\u7ec8\u6b62\u6216\u6267\u884c\u4efb\u610f\u6307\u4ee4\u3002\r\n\r\nSafari\u7684WebKi\u6ca1\u6709\u6b63\u786e\u5730\u5904\u7406\u4e3b\u673a\u540d\u4e2d\u5305\u542b\u6709\u5192\u53f7\u7684URL\uff0c\u5982\u679c\u7528\u6237\u53d7\u9a97\u6253\u5f00\u7279\u5236\u7684URL\u5c31\u4f1a\u5bfc\u81f4\u6267\u884c\u8de8\u7ad9\u811a\u672c\u3002\r\n\r\nWebKit\u4e2d\u7684\u6b63\u5219\u8868\u8fbe\u5f0f\u7f16\u8bd1\u5668\uff08JavaScriptCore/pcre/pcre_compile.cpp\uff09\u4e2d\u5b58\u5728\u5806\u6ea2\u51fa\u6f0f\u6d1e\u3002\u5982\u679c\u5728\u6b63\u5219\u8868\u8fbe\u5f0f\u4e2d\u5d4c\u5957\u4e86\u5927\u91cf\u53cd\u590d\u7684\u8bdd\uff0c\u5c31\u53ef\u4ee5\u89e6\u53d1\u8fd9\u4e2a\u6ea2\u51fa\uff0c\u5bfc\u81f4\u6267\u884c\u4efb\u610f\u6307\u4ee4\u3002\r\n\n\nApple Safari 3.1 \r\nApple Safari 3\n Robert Swiecki \uff08<a href=mailto:robert@swiecki.net target=_blank>robert@swiecki.net</a>\uff09\r\n Charlie Miller\r\n \r\n \u94fe\u63a5\uff1a<a href=http://support.apple.com/kb/HT1467 target=_blank>http://support.apple.com/kb/HT1467</a>\r\n <a href=http://marc.info/?l=bugtraq&amp;m=120838537332599&amp;w=2 target=_blank>http://marc.info/?l=bugtraq&amp;m=120838537332599&amp;w=2</a>", "reporter": "Root", "published": "2008-04-18T00:00:00", "type": "seebug", "title": "Apple Safari 3.1.1\u7248\u672c\u4fee\u590d\u591a\u4e2a\u5b89\u5168\u6f0f\u6d1e", "enchantments": {"score": {"vector": "NONE", "value": 5.0}}, "bulletinFamily": "exploit", "cvelist": ["CVE-2008-1024", "CVE-2008-1025", "CVE-2008-1026"], "_object_type": "robots.models.seebug.SeebugBulletin", "modified": "2008-04-18T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-3186", "id": "SSV:3186", "sourceData": "", "sourceHref": "", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "status": "details"}], "nessus": [{"lastseen": "2018-09-01T23:46:32", "references": ["http://support.apple.com/kb/HT1467", "http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html"], "pluginID": "31993", "description": "The version of Safari installed on the remote host reportedly is affected by several issues :\n\n - A malicious website can spoof window titles and URL bars (CVE-2007-2398).\n\n - A memory corruption issue in the file downloading capability could lead to a crash or arbitrary code execution (CVE-2008-1024).\n\n - A cross-site scripting vulnerability exists in WebKit's handling of URLs that contain a colon character in the host name (CVE-2008-1025).\n\n - A heap-based buffer overflow exists in WebKit's handling of JavaScript regular expressions (CVE-2008-1026).", "edition": 6, "reporter": "Tenable", "published": "2008-04-18T00:00:00", "title": "Safari < 3.1.1 Multiple Vulnerabilities", "type": "nessus", "enchantments": {"score": {"vector": "NONE", "value": 6.8}}, "naslFamily": "Windows", "bulletinFamily": "scanner", "cvelist": ["CVE-2007-2398", "CVE-2008-1024", "CVE-2008-1025", "CVE-2008-1026"], "modified": "2018-07-27T00:00:00", "cpe": ["cpe:/a:apple:safari"], "id": "SAFARI_3_1_1.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=31993", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(31993);\n script_version(\"1.14\");\n script_cvs_date(\"Date: 2018/07/27 18:38:15\");\n\n script_cve_id(\n \"CVE-2007-2398\",\n \"CVE-2008-1024\",\n \"CVE-2008-1025\",\n \"CVE-2008-1026\"\n );\n script_bugtraq_id(24484, 28813, 28814, 28815);\n script_xref(name:\"Secunia\", value:\"29846\");\n\n script_name(english:\"Safari < 3.1.1 Multiple Vulnerabilities\");\n script_summary(english:\"Checks version number of Safari\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host contains a web browser that is affected by several\nissues.\" );\n script_set_attribute(attribute:\"description\", value:\n\"The version of Safari installed on the remote host reportedly is\naffected by several issues :\n\n - A malicious website can spoof window titles and URL bars\n (CVE-2007-2398).\n\n - A memory corruption issue in the file downloading\n capability could lead to a crash or arbitrary code\n execution (CVE-2008-1024).\n\n - A cross-site scripting vulnerability exists in WebKit's\n handling of URLs that contain a colon character in\n the host name (CVE-2008-1025).\n\n - A heap-based buffer overflow exists in WebKit's handling\n of JavaScript regular expressions (CVE-2008-1026).\" );\n script_set_attribute(attribute:\"see_also\", value:\"http://support.apple.com/kb/HT1467\" );\n script_set_attribute(attribute:\"see_also\", value:\"http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html\" );\n script_set_attribute(attribute:\"solution\", value:\n\"Upgrade to Safari 3.1.1 or later.\" );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n script_cwe_id(79, 119, 399);\n script_set_attribute(attribute:\"plugin_publication_date\", value: \"2008/04/18\");\n script_set_attribute(attribute:\"vuln_publication_date\", value: \"2007/06/14\");\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:apple:safari\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2008-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"safari_installed.nasl\");\n script_require_keys(\"SMB/Safari/FileVersion\");\n\n exit(0);\n}\n\n\ninclude(\"global_settings.inc\");\n\n\nver = get_kb_item(\"SMB/Safari/FileVersion\");\nif (isnull(ver)) exit(0);\n\niver = split(ver, sep:'.', keep:FALSE);\nfor (i=0; i<max_index(iver); i++)\n iver[i] = int(iver[i]);\n\nif (\n iver[0] < 3 ||\n (\n iver[0] == 3 &&\n (\n iver[1] < 525 ||\n (iver[1] == 525 && iver[2] < 17)\n )\n )\n)\n{\n if (report_verbosity)\n {\n prod_ver = get_kb_item(\"SMB/Safari/ProductVersion\");\n if (!isnull(prod_ver)) ver = prod_ver;\n\n report = string(\n \"\\n\",\n \"Safari version \", ver, \" is currently installed on the remote host.\\n\"\n );\n security_hole(port:get_kb_item(\"SMB/transport\"), extra:report);\n }\n else security_hole(get_kb_item(\"SMB/transport\"));\n}\n", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:NONE/I:COMPLETE/A:NONE/"}}]}