Lucene search

K
cve[email protected]CVE-2007-3759
HistorySep 27, 2007 - 10:17 p.m.

CVE-2007-3759

2007-09-2722:17:00
CWE-16
web.nvd.nist.gov
25
safari
apple iphone
javascript
security vulnerability
cve-2007-3759
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect.

Affected configurations

NVD
Node
appleiphoneMatch1.0
OR
appleiphone_osMatch1.0.1
OR
appleiphone_osMatch1.0.2
AND
applesafari
CPENameOperatorVersion
apple:safariapple safarieq*

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

Related for CVE-2007-3759