Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-5858
HistoryDec 19, 2007 - 9:46 p.m.

CVE-2007-5858

2007-12-1921:46:00
CWE-79
mitre
web.nvd.nist.gov
33
cve-2007-5858
webkit
safari
apple
mac os x
iphone
xss
cross-site scripting
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.9

Confidence

High

EPSS

0.027

Percentile

90.7%

JSON

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to “navigate the subframes of any other page,” which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.

Affected configurations

Nvd
Node
applemac_os_xMatch10.4.11
OR
applemac_os_xMatch10.5.1
AND
appleiphoneMatch1.0
OR
appleiphoneMatch1.02
OR
appleipod_touchMatch1.1
OR
appleipod_touchMatch1.1.1
OR
appleipod_touchMatch1.1.2
OR
appleiphone_osMatch1.0.1
OR
appleiphone_osMatch1.0.2
OR
appleiphone_osMatch1.1.1
OR
appleiphone_osMatch1.1.2
AND
applesafari
VendorProductVersionCPE
applemac_os_x10.4.11cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
applemac_os_x10.5.1cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
appleiphone1.0cpe:2.3:h:apple:iphone:1.0:*:*:*:*:*:*:*
appleiphone1.02cpe:2.3:h:apple:iphone:1.02:*:*:*:*:*:*:*
appleipod_touch1.1cpe:2.3:h:apple:ipod_touch:1.1:*:*:*:*:*:*:*
appleipod_touch1.1.1cpe:2.3:h:apple:ipod_touch:1.1.1:*:*:*:*:*:*:*
appleipod_touch1.1.2cpe:2.3:h:apple:ipod_touch:1.1.2:*:*:*:*:*:*:*
appleiphone_os1.0.1cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*
appleiphone_os1.0.2cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*
appleiphone_os1.1.1cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

Related

prion 1
cvelist 1
nvd 1
nessus 1
openvas 2
prion
prion
Cross site scripting
2007-12-19 21:46:00
cvelist
cvelist
CVE-2007-5858
2007-12-19 21:00:00
nvd
nvd
CVE-2007-5858
2007-12-19 21:46:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2007-009)
2007-12-18 00:00:00
openvas
openvas
Mac OS X Security Update 2007-009
2010-05-12 00:00:00
Mac OS X Security Update 2007-009
2010-05-12 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.9

Confidence

High

EPSS

0.027

Percentile

90.7%

JSON
Related for CVE-2007-5858
prion1cvelist1nvd1nessus1openvas2