PT-2007-5000 · Apple · Iphone+1

Published 2007-09-27 · Updated 2022-08-09 · CVE-2007-3759

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple iPhone version 1.1.1

Description The issue concerns Safari not fully disabling Javascript when requested, potentially leaving it open to unexpected attacks until Safari is restarted.

Recommendations For Apple iPhone version 1.1.1, restart Safari after disabling Javascript to ensure the setting takes effect.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-3759

Affected Products

Safari

Iphone

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-3759 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36858 · Note
• http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1018752 · Note
• http://docs.info.apple.com/article.html?artnum=306586 · Note
• http://osvdb.org/38532 · Note
• http://secunia.com/advisories/26983 · Note
• http://securityfocus.com/bid/25853 · Note