CVE-2009-3272: Apple Safari

Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days.

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.

Affected products

• Apple Safari: version 3.2.3 only; version 4.0 only; version 4.0.0b only; version 4.0.2 only; version 4.0.3 only

Published 2009-09-21. Last modified 2026-06-16.