NVD

Id
52702  
Name
CVE-2007-0478  
Description
WebCore on Apple Mac OS X 10.3.9 and 10.4.10, as used in Safari, does not properly parse HTML comments in TITLE elements, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within an HTML comment.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-01-24  
Modified Date
2011-03-07  
Seq
2007-0478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
266389 52702 CVE-2007-0478 http://docs.info.apple.com/article.html?artnum=306172  View
266390 52702 CVE-2007-0478 APPLE-SA-2007-07-31  View
266391 52702 CVE-2007-0478 1018494  View
266392 52702 CVE-2007-0478 http://www.beanfuzz.com/wordpress/?p=99  View
266393 52702 CVE-2007-0478 20070123 Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability  View
266394 52702 CVE-2007-0478 25159  View
266395 52702 CVE-2007-0478 ADV-2007-2732  View
266396 52702 CVE-2007-0478 safari-html-comment-xss(31846)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52750 JVNDB-2007-001442 Safari で使用される WebCore におけるクロスサイトスクリプティング攻撃を誘発される脆弱性 Safari で使用される WebCore は、TITLE 要素の HTML コメントを適切に構文解析しないため、クロスサイトスクリプティング攻撃を誘発され、複数のクロスサイトスクリプティング保護スキームを回避される脆弱性が存在します。 CVE-2007-0478 23833 CVE-2007-0478 52702 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001442.html 2007-01-25 2012-06-26 View