CVE-2007-2398
N/A
N/A
Summary
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://osvdb.org/38862
- http://support.apple.com/kb/HT1467
- http://www.vupen.com/english/advisories/2007/2316
- http://www.vupen.com/english/advisories/2008/0979/references
- http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html
- http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
- http://www.securitytracker.com/id?1018282
- http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0311.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35050
- http://www.securityfocus.com/archive/1/471452/100/0/threaded
- http://www.securityfocus.com/bid/24484
- http://www.securityfocus.com/archive/1/471454/100/0/threaded
References
- http://osvdb.org/38862
- http://support.apple.com/kb/HT1467
- http://www.vupen.com/english/advisories/2007/2316
- http://www.vupen.com/english/advisories/2008/0979/references
- http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html
- http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
- http://www.securitytracker.com/id?1018282
- http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0311.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35050
- http://www.securityfocus.com/archive/1/471452/100/0/threaded
- http://www.securityfocus.com/bid/24484
- http://www.securityfocus.com/archive/1/471454/100/0/threaded
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.