CVE

Id
27115  
CVE No.
CVE-2007-3758  
Status
Candidate  
Description
Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window properties for web pages that are in a different domain, which can be leveraged to conduct cross-site scripting (XSS) attacks.  
Phase
Assigned (20070712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277476 27115 CVE-2007-3758 CONFIRM:http://docs.info.apple.com/article.html?artnum=306586  View
277477 27115 CVE-2007-3758 CONFIRM:http://docs.info.apple.com/article.html?artnum=307041  View
277478 27115 CVE-2007-3758 APPLE:APPLE-SA-2007-09-27  View
277479 27115 CVE-2007-3758 URL:http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html  View
277480 27115 CVE-2007-3758 APPLE:APPLE-SA-2007-11-14  View
277481 27115 CVE-2007-3758 URL:http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html  View
277482 27115 CVE-2007-3758 CERT:TA07-319A  View
277483 27115 CVE-2007-3758 URL:http://www.us-cert.gov/cas/techalerts/TA07-319A.html  View
277484 27115 CVE-2007-3758 BID:25857  View
277485 27115 CVE-2007-3758 URL:http://www.securityfocus.com/bid/25857  View
277486 27115 CVE-2007-3758 BID:26444  View
277487 27115 CVE-2007-3758 URL:http://www.securityfocus.com/bid/26444  View
277488 27115 CVE-2007-3758 VUPEN:ADV-2007-3287  View
277489 27115 CVE-2007-3758 URL:http://www.vupen.com/english/advisories/2007/3287  View
277490 27115 CVE-2007-3758 VUPEN:ADV-2007-3868  View
277491 27115 CVE-2007-3758 URL:http://www.vupen.com/english/advisories/2007/3868  View
277492 27115 CVE-2007-3758 SECTRACK:1018752  View
277493 27115 CVE-2007-3758 URL:http://securitytracker.com/id?1018752  View
277494 27115 CVE-2007-3758 SECUNIA:26983  View
277495 27115 CVE-2007-3758 URL:http://secunia.com/advisories/26983  View
277496 27115 CVE-2007-3758 SECUNIA:27643  View
277497 27115 CVE-2007-3758 URL:http://secunia.com/advisories/27643  View
277498 27115 CVE-2007-3758 XF:iphone-window-security-bypass(36857)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52062 JVNDB-2007-000725 Apple Safari におけるフレームタグに関するクロスサイトスクリプティングの脆弱性 Apple Safari には、フレームタグの処理に不備が存在するために、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3760 27115 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000725.html  View