PT-2007-6818 · Apple · Iphone+2

Published 2007-12-19 · Updated 2022-08-09 · CVE-2007-5858

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Safari versions 10.4.11 and 10.5.1 iPhone versions 1.0 through 1.1.2 iPod touch versions 1.1 through 1.1.2

Description The issue allows remote attackers to navigate the subframes of any other page, which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.

Recommendations For Safari versions 10.4.11 and 10.5.1, update to a newer version to mitigate the risk. For iPhone versions 1.0 through 1.1.2, update to a newer version to mitigate the risk. For iPod touch versions 1.1 through 1.1.2, update to a newer version to mitigate the risk.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-5858

Affected Products

Safari

Iphone

Ipod Touch

References · 14

• http://vupen.com/english/advisories/2008/0147 · Vendor Advisory
• http://vupen.com/english/advisories/2007/4238 · Vendor Advisory
• http://secunia.com/advisories/28497 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html · Vendor Advisory
• http://secunia.com/advisories/28136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5858 · Security Note
• http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=307179 · Note
• http://docs.info.apple.com/article.html?artnum=307178 · Note
• http://securityfocus.com/bid/26911 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39091 · Note
• http://securitytracker.com/id?1019108 · Note
• http://docs.info.apple.com/article.html?artnum=307302 · Note
• http://us-cert.gov/cas/techalerts/TA07-352A.html · Note