VULNERABILITY INTELLIGENCE

CVE-2008-2306

CVSS score9.3 HIGH
EPSS probability3.81%
CISA KEVNot currently listed
Published2008-06-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Apple Safari before 3.1.2 on Windows does not properly interpret the URLACTION_SHELL_EXECUTE_HIGHRISK Internet Explorer zone setting, which allows remote attackers to bypass intended access restrictions, and force a client system to download and execute arbitrary files.

Primary references