NVD

Id
969  
Name
CVE-2008-1007  
Description
WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-03-18  
Modified Date
2011-03-10  
Seq
2008-1007  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5919 969 CVE-2008-1007 http://docs.info.apple.com/article.html?artnum=307563  View
5920 969 CVE-2008-1007 APPLE-SA-2008-03-18  View
5921 969 CVE-2008-1007 28290  View
5922 969 CVE-2008-1007 28335  View
5923 969 CVE-2008-1007 1019653  View
5924 969 CVE-2008-1007 TA08-079A  View
5925 969 CVE-2008-1007 ADV-2008-0920  View
5926 969 CVE-2008-1007 safari-navigation-policy-security-bypass(41324)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45883 JVNDB-2008-001193 Apple Safari の WebCore におけるフレームナビゲーションポリシーの不適用によるクロスサイトスクリプティングの脆弱性 Apple Safari の WebCore には、Java アプレットにフレームナビゲーションポリシーを適用しないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1007 31120 CVE-2008-1007 969 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001193.html 2008-03-18 2008-04-04 View