CVE

Id
31124  
CVE No.
CVE-2008-1007  
Status
Candidate  
Description
WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.  
Phase
Assigned (20080226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
331657 31124 CVE-2008-1007 CONFIRM:http://docs.info.apple.com/article.html?artnum=307563  View
331658 31124 CVE-2008-1007 APPLE:APPLE-SA-2008-03-18  View
331659 31124 CVE-2008-1007 URL:http://lists.apple.com/archives/security-announce/2008/Mar/msg00000.html  View
331660 31124 CVE-2008-1007 CERT:TA08-079A  View
331661 31124 CVE-2008-1007 URL:http://www.us-cert.gov/cas/techalerts/TA08-079A.html  View
331662 31124 CVE-2008-1007 BID:28335  View
331663 31124 CVE-2008-1007 URL:http://www.securityfocus.com/bid/28335  View
331664 31124 CVE-2008-1007 BID:28290  View
331665 31124 CVE-2008-1007 URL:http://www.securityfocus.com/bid/28290  View
331666 31124 CVE-2008-1007 VUPEN:ADV-2008-0920  View
331667 31124 CVE-2008-1007 URL:http://www.vupen.com/english/advisories/2008/0920/references  View
331668 31124 CVE-2008-1007 SECTRACK:1019653  View
331669 31124 CVE-2008-1007 URL:http://www.securitytracker.com/id?1019653  View
331670 31124 CVE-2008-1007 SECUNIA:29393  View
331671 31124 CVE-2008-1007 URL:http://secunia.com/advisories/29393  View
331672 31124 CVE-2008-1007 XF:safari-navigation-policy-security-bypass(41324)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45887 JVNDB-2008-001197 Apple Safari の WebKit におけるインスタンス処理の不備によるクロスサイトスクリプティングの脆弱性 Apple Safari の WebKit には、フレームのインスタンスを呼び出す処理に不備があるために、あるフレームを別のフレームで呼び出してしまうクロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1011 31124 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001197.html  View