CVE-2008-1008

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML via the document.domain property.

Link	Resource
http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html	Patch
http://www.securitytracker.com/id?1019653
http://www.securityfocus.com/bid/28336
http://www.us-cert.gov/cas/techalerts/TA08-079A.html	US Government Resource
http://www.securityfocus.com/bid/28290
http://secunia.com/advisories/29393
http://www.vupen.com/english/advisories/2008/0920/references
http://docs.info.apple.com/article.html?artnum=307563
https://exchange.xforce.ibmcloud.com/vulnerabilities/41323

Configuration 1

cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*

---

Published : 2008-03-19 12:44

Updated : 2017-08-08 01:29

---

NVD link : CVE-2008-1008

Mitre link : CVE-2008-1008

No products.

CWE-79