CVE-2008-2001: Apple Safari

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that triggers an out-of-bounds access, possibly due to a NULL pointer dereference.

Affected products

• Apple Safari: version 3.1.1 only

Published 2008-04-28. Last modified 2026-06-16.