Overview
The Apple Webkit contains a memory corruption vulnerability.This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code.
Description
According to Apple Security Update 2008-004: A memory corruption issue exists in WebKit's handling of JavaScript arrays. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution. Note that this vulnerability is reported to affect software on both the Windows and Apple OS X operating systems. |
Impact
A remote, unauthenticated attacker may be able to execute arbitrary code. |
Solution
Apply Apple Updates |
Vendor Information
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | ||
| Temporal | ||
| Environmental |
References
Acknowledgements
This vulnerability was reported in Apple Security Update 2008-004. Apple credits James Urquhart with reporting this issue.
This document was written by Ryan Giobbi.
Other Information
| CVE IDs: | CVE-2008-2307 |
| Severity Metric: | 10.33 |
| Date Public: | 2008-06-19 |
| Date First Published: | 2008-07-01 |
| Date Last Updated: | 2008-07-01 22:29 UTC |
| Document Revision: | 6 |