CVE

Id
23835  
CVE No.
CVE-2007-0478  
Status
Candidate  
Description
WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE elements, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within an HTML comment.  
Phase
Assigned (20070124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
232027 23835 CVE-2007-0478 BUGTRAQ:20070123 Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability  View
232028 23835 CVE-2007-0478 URL:http://www.securityfocus.com/archive/1/archive/1/457763/100/0/threaded  View
232029 23835 CVE-2007-0478 MISC:http://www.beanfuzz.com/wordpress/?p=99  View
232030 23835 CVE-2007-0478 CONFIRM:http://docs.info.apple.com/article.html?artnum=306172  View
232031 23835 CVE-2007-0478 APPLE:APPLE-SA-2007-07-31  View
232032 23835 CVE-2007-0478 URL:http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html  View
232033 23835 CVE-2007-0478 BID:25159  View
232034 23835 CVE-2007-0478 URL:http://www.securityfocus.com/bid/25159  View
232035 23835 CVE-2007-0478 VUPEN:ADV-2007-2732  View
232036 23835 CVE-2007-0478 URL:http://www.vupen.com/english/advisories/2007/2732  View
232037 23835 CVE-2007-0478 OSVDB:32712  View
232038 23835 CVE-2007-0478 URL:http://osvdb.org/32712  View
232039 23835 CVE-2007-0478 SECTRACK:1018494  View
232040 23835 CVE-2007-0478 URL:http://securitytracker.com/id?1018494  View
232041 23835 CVE-2007-0478 SECUNIA:23893  View
232042 23835 CVE-2007-0478 URL:http://secunia.com/advisories/23893  View
232043 23835 CVE-2007-0478 SECUNIA:26235  View
232044 23835 CVE-2007-0478 URL:http://secunia.com/advisories/26235  View
232045 23835 CVE-2007-0478 XF:safari-html-comment-xss(31846)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51417 JVNDB-2007-000079 Cisco IOS の不正な IP オプションを含む IP ヘッダによる脆弱性 Cisco IOS および Cisco IOS XR には、不正な IP オプションを含む IP ヘッダを持つ特定のプロトコルのパケット (ICMP,PIMv2,PGM,URD) の処理に関する脆弱性が存在します。 CVE-2007-0480 23835 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000079.html  View