CVE-2007-3274: Apple Safari

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location.

Affected products

• Apple Safari: version 3.0 only; version 3.0.1 only

Published 2007-06-19. Last modified 2026-06-16.