CVE

Id
28028  
CVE No.
CVE-2007-4671  
Status
Candidate  
Description
Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.  
Phase
Assigned (20070905)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
289865 28028 CVE-2007-4671 CONFIRM:http://docs.info.apple.com/article.html?artnum=306586  View
289866 28028 CVE-2007-4671 CONFIRM:http://docs.info.apple.com/article.html?artnum=307041  View
289867 28028 CVE-2007-4671 APPLE:APPLE-SA-2007-09-27  View
289868 28028 CVE-2007-4671 URL:http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html  View
289869 28028 CVE-2007-4671 APPLE:APPLE-SA-2007-11-14  View
289870 28028 CVE-2007-4671 URL:http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html  View
289871 28028 CVE-2007-4671 CERT:TA07-319A  View
289872 28028 CVE-2007-4671 URL:http://www.us-cert.gov/cas/techalerts/TA07-319A.html  View
289873 28028 CVE-2007-4671 BID:25852  View
289874 28028 CVE-2007-4671 URL:http://www.securityfocus.com/bid/25852  View
289875 28028 CVE-2007-4671 BID:26444  View
289876 28028 CVE-2007-4671 URL:http://www.securityfocus.com/bid/26444  View
289877 28028 CVE-2007-4671 VUPEN:ADV-2007-3287  View
289878 28028 CVE-2007-4671 URL:http://www.vupen.com/english/advisories/2007/3287  View
289879 28028 CVE-2007-4671 VUPEN:ADV-2007-3868  View
289880 28028 CVE-2007-4671 URL:http://www.vupen.com/english/advisories/2007/3868  View
289881 28028 CVE-2007-4671 SECTRACK:1018752  View
289882 28028 CVE-2007-4671 URL:http://securitytracker.com/id?1018752  View
289883 28028 CVE-2007-4671 SECUNIA:26983  View
289884 28028 CVE-2007-4671 URL:http://secunia.com/advisories/26983  View
289885 28028 CVE-2007-4671 SECUNIA:27643  View
289886 28028 CVE-2007-4671 URL:http://secunia.com/advisories/27643  View
289887 28028 CVE-2007-4671 XF:iphone-https-security-bypass(36862)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52023 JVNDB-2007-000686 Apple QuickTime に任意のコマンドが実行される脆弱性 Apple QuickTime には、任意のコマンドが実行される脆弱性が存在します。 CVE-2007-4673 28028 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000686.html  View