CVE Vulnerability

CVE-2007-2398

Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.

7.1 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact NONE

Scope

References
Link Resource
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0311.html
http://www.securityfocus.com/archive/1/471454/100/0/threaded
http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html
http://www.securityfocus.com/bid/24484
http://www.securitytracker.com/id?1018282
http://support.apple.com/kb/HT1467
http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
http://www.vupen.com/english/advisories/2008/0979/references
http://www.vupen.com/english/advisories/2007/2316
http://osvdb.org/38862
https://exchange.xforce.ibmcloud.com/vulnerabilities/35050
http://www.securityfocus.com/archive/1/471452/100/0/threaded
Configurations

Configuration 1
Information

Published : 2007-06-21 10:30

Updated : 2018-10-16 04:43

NVD link : CVE-2007-2398

Mitre link : CVE-2007-2398

Products Affected
No products.
CWE
NVD-CWE-Other