PT-2007-6818 · Apple · Iphone+2

Publicado 2007-12-19 · Atualizado 2022-08-09 · CVE-2007-5858

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Safari versions 10.4.11 and 10.5.1 iPhone versions 1.0 through 1.1.2 iPod touch versions 1.1 through 1.1.2

Description The issue allows remote attackers to navigate the subframes of any other page, which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.

Recommendations For Safari versions 10.4.11 and 10.5.1, update to a newer version to mitigate the risk. For iPhone versions 1.0 through 1.1.2, update to a newer version to mitigate the risk. For iPod touch versions 1.1 through 1.1.2, update to a newer version to mitigate the risk.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-5858

Produtos afetados

Safari

Iphone

Ipod Touch

Referências · 14

• http://docs.info.apple.com/article.html?artnum=307179 · Nota
• http://docs.info.apple.com/article.html?artnum=307178 · Nota
• http://securityfocus.com/bid/26911 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39091 · Nota
• http://vupen.com/english/advisories/2008/0147 · Aviso do Fabricante
• http://securitytracker.com/id?1019108 · Nota
• http://vupen.com/english/advisories/2007/4238 · Aviso do Fabricante
• http://secunia.com/advisories/28497 · Aviso do Fabricante
• http://docs.info.apple.com/article.html?artnum=307302 · Nota
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html · Aviso do Fabricante
• http://secunia.com/advisories/28136 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA07-352A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5858 · Nota de Segurança
• http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html · Aviso do Fabricante