CVEvulnerability
CVE-2007-2400
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-06-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-362, CWE-79
Description
Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.
Affected configurations
• apple iphone os (<= 1.0)
• apple safari 3.0
• apple safari 3.0.1
Related
References
- http://docs.info.apple.com/article.html?artnum=306173 Vendor Advisory
- http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html Patch, Vendor Advisory
- http://osvdb.org/36452 osvdb.org
- http://secunia.com/advisories/26287 Vendor Advisory
- http://www.kb.cert.org/vuls/id/289988 US Government Resource
- http://www.securityfocus.com/bid/24599 Patch
- http://www.securitytracker.com/id?1018282 Patch
- http://www.vupen.com/english/advisories/2007/2316 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2731 Vendor Advisory
- http://docs.info.apple.com/article.html?artnum=306173 Vendor Advisory
- http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html Patch, Vendor Advisory
- http://osvdb.org/36452 osvdb.org
- http://secunia.com/advisories/26287 Vendor Advisory
- http://www.kb.cert.org/vuls/id/289988 US Government Resource
- http://www.securityfocus.com/bid/24599 Patch
- http://www.securitytracker.com/id?1018282 Patch
- http://www.vupen.com/english/advisories/2007/2316 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2731 Vendor Advisory