CVE-2008-2307
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X...
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
- Record
CVE-2008-2307- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
- Record
CVE-2008-2307- Updated
- 2026-11-02
EUVDEUVD-2008-2303 No score
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
- Record
EUVD-2008-2303- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2whf-mx89-7886 No score
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X...
Unspecified vulnerability in WebKit in Apple Safari before 3.1.2, as distributed in Mac OS X before 10.5.4, and standalone for Windows and Mac OS X 10.4, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors involving JavaScript arrays that trigger memory corruption.
- Record
GHSA-2whf-mx89-7886- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2307 is a high vulnerability (CVSS 9.3) in Apple Safari, published June 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.33%, the 94th percentile. No source names a fixed version.
References
support.apple.com/kb/HT2163
redhat.com/archives/fedora-package-announce/2008-July/msg00319.html
vupen.com/english/advisories/2008/1981/references
secunia.com/advisories/30775
Show 15 moreShow less
lists.apple.com/archives/security-announce/2008//Jun/msg00003.html
kb.cert.org/vuls/id/361043
securityfocus.com/bid/29836
securitytracker.com/id?1020330
nvd.nist.gov/vuln/detail/CVE-2008-2307
github.com/advisories/GHSA-2whf-mx89-7886