CVE-2008-2001: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple Safari 3.1.1 allows remote attackers to cause a denial of service application crash via a file:///%E2 link that triggers an out-of-bounds access, possibly due to a NULL pointer dereference...