CVEvulnerability
CVE-2007-3514
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:L/Au:N/C:C/I:P/A:N
Description
Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute to a file:// location, a different vector than CVE-2007-3482.
Affected configurations
• apple safari 3.0.2
References
- http://osvdb.org/38861 osvdb.org
- http://www.0x000000.com/?i=371 www.0x000000.com
- http://osvdb.org/38861 osvdb.org
- http://www.0x000000.com/?i=371 www.0x000000.com