PT-2007-4743 · Apple · Safari

Publicado 2007-06-28 · Atualizado 2008-11-15 · CVE-2007-3482

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Safari for Windows version 3.0.1

Description A cross-domain issue allows remote attackers to bypass the same origin policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute.

Recommendations For Apple Safari for Windows version 3.0.1, consider disabling JavaScript as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-3482

Produtos afetados

Safari

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3482 · Nota de Segurança
• http://0x000000.com/?i=371 · Nota
• http://osvdb.org/38860 · Nota
• http://securityfocus.com/bid/24700 · Nota