CVE

Id
27117  
CVE No.
CVE-2007-3760  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags.  
Phase
Assigned (20070712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277511 27117 CVE-2007-3760 CONFIRM:http://docs.info.apple.com/article.html?artnum=306586  View
277512 27117 CVE-2007-3760 CONFIRM:http://docs.info.apple.com/article.html?artnum=307041  View
277513 27117 CVE-2007-3760 APPLE:APPLE-SA-2007-09-27  View
277514 27117 CVE-2007-3760 URL:http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html  View
277515 27117 CVE-2007-3760 APPLE:APPLE-SA-2007-11-14  View
277516 27117 CVE-2007-3760 URL:http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html  View
277517 27117 CVE-2007-3760 CERT:TA07-319A  View
277518 27117 CVE-2007-3760 URL:http://www.us-cert.gov/cas/techalerts/TA07-319A.html  View
277519 27117 CVE-2007-3760 BID:25850  View
277520 27117 CVE-2007-3760 URL:http://www.securityfocus.com/bid/25850  View
277521 27117 CVE-2007-3760 BID:26444  View
277522 27117 CVE-2007-3760 URL:http://www.securityfocus.com/bid/26444  View
277523 27117 CVE-2007-3760 VUPEN:ADV-2007-3287  View
277524 27117 CVE-2007-3760 URL:http://www.vupen.com/english/advisories/2007/3287  View
277525 27117 CVE-2007-3760 VUPEN:ADV-2007-3868  View
277526 27117 CVE-2007-3760 URL:http://www.vupen.com/english/advisories/2007/3868  View
277527 27117 CVE-2007-3760 SECTRACK:1018752  View
277528 27117 CVE-2007-3760 URL:http://securitytracker.com/id?1018752  View
277529 27117 CVE-2007-3760 SECUNIA:26983  View
277530 27117 CVE-2007-3760 URL:http://secunia.com/advisories/26983  View
277531 27117 CVE-2007-3760 SECUNIA:27643  View
277532 27117 CVE-2007-3760 URL:http://secunia.com/advisories/27643  View
277533 27117 CVE-2007-3760 XF:iphone-frametags-security-bypass(36859)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53649 JVNDB-2007-002341 Asterisk の IAX2 チャネルドライバにおけるスタックベースのバッファオーバーフローの脆弱性 Asterisk の IAX2 チャネルドライバ (chan_iax2) には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-3762 27117 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002341.html  View