Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Safari 3.0.2 on Windows may crash or run code when bookmarking malicious page

CVE-2007-3376 · published 19 years ago
Summary

The Windows version of Safari 3.0.2 can be forced to stop working, and in some cases run unwanted code, if a user adds a specially crafted web page to their bookmarks. This happens because the page’s title is unusually long, causing the browser to overflow its memory. Update Safari to a newer version or avoid adding unknown pages as bookmarks to protect your systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple safari 3.0.2
cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title ...
Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long value in the title HTML tag, which triggers the overflow when the user adds the page as a bookmark.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
6% chance of attack within 30 days
Timeline
Published25 Jun 2007
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-3376 · NVD
Track software like this
Free during beta