CVE-2007-3761

2007-09-2722:00:00

mitre

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers to inject arbitrary web script or HTML by causing Javascript events to be applied to a frame in another domain.

References

docs.info.apple.com/article.html?artnum=306586

lists.apple.com/archives/security-announce/2007/Sep/msg00001.html

osvdb.org/38530

secunia.com/advisories/26983

www.securityfocus.com/bid/25851

www.vupen.com/english/advisories/2007/3287

exchange.xforce.ibmcloud.com/vulnerabilities/36860