CVE-2007-2398

Description

Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35050

http://www.vupen.com/english/advisories/2008/0979/references

http://www.vupen.com/english/advisories/2007/2316

http://www.securitytracker.com/id?1018282

http://www.securityfocus.com/bid/24484

http://www.securityfocus.com/archive/1/471454/100/0/threaded

http://www.securityfocus.com/archive/1/471452/100/0/threaded

http://support.apple.com/kb/HT1467

http://osvdb.org/38862

http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html

http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html

http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0311.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3