CVE-2008-1024

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-17 · updated 2026-06-16
Weakness: CWE-399

Description

Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption.

Affected products

Apple Safari: 3, 3.1

References

http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
http://support.apple.com/kb/HT1467
http://www.kb.cert.org/vuls/id/529441
http://www.securityfocus.com/bid/28813
http://www.securitytracker.com/id?1019868
http://www.vupen.com/english/advisories/2008/0979/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41864
http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
http://support.apple.com/kb/HT1467
http://www.kb.cert.org/vuls/id/529441
http://www.securityfocus.com/bid/28813
http://www.securitytracker.com/id?1019868

Get alerted when CVE-2008-1024 or the next vulnerability affects your stack