Apple Safari for Windows Bookmark Title Buffer Overflow Vulnerability

Bugtraq ID:	24619
Class:	Boundary Condition Error
CVE:	CVE-2007-3376 CVE-2007-3743
Remote:	Yes
Local:	No
Published:	Jun 25 2007 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	E.Azizov is credited with the discovery of this vulnerability.
Vulnerable:	Apple Safari 3.0.2 Beta for Windows
Not Vulnerable:	Apple Safari 3.0.3 Beta for Windows

Apple Safari for Windows Bookmark Title Buffer Overflow Vulnerability

Safari for Windows is prone to a buffer-overflow vulnerability. This issue is triggered when an attacker entices a victim to bookmark a maliciously crafted site.

A remote attacker may exploit this issue to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.

Apple Safari for Windows Bookmark Title Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/24619.html

Apple Safari for Windows Bookmark Title Buffer Overflow Vulnerability

Solution:
Apple has released Safari 3 Beta Update 3.0.3 to address this issue. Please see the references for more information.


Apple Safari 3.0.2 Beta for Windows

• Apple SafariQuickTimeSetup.exe
  Safari+QuickTime for Windows XP or Vista
  http://www.apple.com/safari/download/


• Apple SafariSetup.exe
  For Windows XP or Vista
  http://www.apple.com/safari/download/

Apple Safari for Windows Bookmark Title Buffer Overflow Vulnerability

References:

• Safari Homepage (Apple)
  
• Safari Bookmarks Buffer Overflow Vulnerability (E.Azizov)