CVE-2009-2421

2009-07-0916:00:00

mitre

www.cve.org

7.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

JSON

The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a “high-bit character” in a URL fragment for an unspecified protocol.