CVE-2008-1024: Apple Safari

Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days.

Apple Safari before 3.1.1, when running on Windows XP or Vista, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file download with a crafted file name, which triggers memory corruption.

Affected products

• Apple Safari: version 3 only; version 3.1 only

Published 2008-04-17. Last modified 2026-06-16.