CVE-2008-2306
EUVD-2008-230223.06.2008, 20:41
Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 𝑥 ≤ 3.1.1 |
| apple | safari | 3.0 |
| apple | safari | 3.0.1 |
| apple | safari | 3.0.2 |
| apple | safari | 3.0.3 |
| apple | safari | 3.0.4 |
| apple | safari | 3.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References