Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 25/06/2007 Updated: 09/08/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Race condition in Apple Safari 3 Beta prior to 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone prior to 1.0.1, allows remote malicious users to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone_os
apple safari 3.0.1
apple safari 3.0

CWE-79 CWE-362 http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html http://www.securityfocus.com/bid/24599 http://www.securitytracker.com/id?1018282 http://docs.info.apple.com/article.html?artnum=306173 http://www.kb.cert.org/vuls/id/289988 http://secunia.com/advisories/26287 http://osvdb.org/36452 http://www.vupen.com/english/advisories/2007/2731 http://www.vupen.com/english/advisories/2007/2316 https://nvd.nist.gov https://www.kb.cert.org/vuls/id/289988

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-2400

Vulnerability Summary

References

Vulmon Search

About

Products

Connect