CVE

Id
29215  
CVE No.
CVE-2007-5858  
Status
Candidate  
Description
WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.  
Phase
Assigned (20071106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
306553 29215 CVE-2007-5858 CONFIRM:http://docs.info.apple.com/article.html?artnum=307179  View
306554 29215 CVE-2007-5858 CONFIRM:http://docs.info.apple.com/article.html?artnum=307178  View
306555 29215 CVE-2007-5858 CONFIRM:http://docs.info.apple.com/article.html?artnum=307302  View
306556 29215 CVE-2007-5858 APPLE:APPLE-SA-2007-12-17  View
306557 29215 CVE-2007-5858 URL:http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html  View
306558 29215 CVE-2007-5858 APPLE:APPLE-SA-2008-01-15  View
306559 29215 CVE-2007-5858 URL:http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html  View
306560 29215 CVE-2007-5858 CERT:TA07-352A  View
306561 29215 CVE-2007-5858 URL:http://www.us-cert.gov/cas/techalerts/TA07-352A.html  View
306562 29215 CVE-2007-5858 BID:26911  View
306563 29215 CVE-2007-5858 URL:http://www.securityfocus.com/bid/26911  View
306564 29215 CVE-2007-5858 VUPEN:ADV-2007-4238  View
306565 29215 CVE-2007-5858 URL:http://www.vupen.com/english/advisories/2007/4238  View
306566 29215 CVE-2007-5858 VUPEN:ADV-2008-0147  View
306567 29215 CVE-2007-5858 URL:http://www.vupen.com/english/advisories/2008/0147  View
306568 29215 CVE-2007-5858 SECTRACK:1019108  View
306569 29215 CVE-2007-5858 URL:http://securitytracker.com/id?1019108  View
306570 29215 CVE-2007-5858 SECUNIA:28136  View
306571 29215 CVE-2007-5858 URL:http://secunia.com/advisories/28136  View
306572 29215 CVE-2007-5858 SECUNIA:28497  View
306573 29215 CVE-2007-5858 URL:http://secunia.com/advisories/28497  View
306574 29215 CVE-2007-5858 XF:safari-webkit-security-bypass(39091)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52367 JVNDB-2007-001057 Apple Mac OS X の Spin Tracer における出力ファイルに関する任意のコードを実行される脆弱性 Apple Mac OS X の Spin Tracer には、出力ファイルの処理に不備があり、任意のコードを実行される脆弱性が存在します。 CVE-2007-5860 29215 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001057.html  View