CVE-2008-1003

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to sites that set the document.domain property or have the same document.domain.

Link	Resource
http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html	Patch
http://www.securitytracker.com/id?1019653
http://www.securityfocus.com/bid/28330
http://www.us-cert.gov/cas/techalerts/TA08-079A.html	US Government Resource
http://www.securityfocus.com/bid/28290
http://secunia.com/advisories/29393
http://www.vupen.com/english/advisories/2008/0920/references
http://docs.info.apple.com/article.html?artnum=307563
https://exchange.xforce.ibmcloud.com/vulnerabilities/41334

Configuration 1

cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*

---

Published : 2008-03-19 12:44

Updated : 2017-08-08 01:29

---

NVD link : CVE-2008-1003

Mitre link : CVE-2008-1003

No products.

CWE-79