CVE

Id
27116  
CVE No.
CVE-2007-3759  
Status
Candidate  
Description
Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect.  
Phase
Assigned (20070712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277499 27116 CVE-2007-3759 CONFIRM:http://docs.info.apple.com/article.html?artnum=306586  View
277500 27116 CVE-2007-3759 APPLE:APPLE-SA-2007-09-27  View
277501 27116 CVE-2007-3759 URL:http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html  View
277502 27116 CVE-2007-3759 BID:25853  View
277503 27116 CVE-2007-3759 URL:http://www.securityfocus.com/bid/25853  View
277504 27116 CVE-2007-3759 OSVDB:38532  View
277505 27116 CVE-2007-3759 URL:http://osvdb.org/38532  View
277506 27116 CVE-2007-3759 SECTRACK:1018752  View
277507 27116 CVE-2007-3759 URL:http://securitytracker.com/id?1018752  View
277508 27116 CVE-2007-3759 SECUNIA:26983  View
277509 27116 CVE-2007-3759 URL:http://secunia.com/advisories/26983  View
277510 27116 CVE-2007-3759 XF:iphone-javascript-weak-security(36858)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52063 JVNDB-2007-000726 Apple iPhone の Safari におけるフレームに関するクロスサイトスクリプティングの脆弱性 Apple iPhone の Safari には、異なるドメインのフレームから提供された Javascript イベントを適切に処理しないために、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3761 27116 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000726.html  View