Lucene search

PRIOn knowledge basePRION:CVE-2007-3760

HistorySep 27, 2007 - 10:17 p.m.

Cross site scripting

2007-09-2722:17:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.9%

JSON

Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags.

CPENameOperatorVersion
safarile3.0.3

CPE	Name	Operator	Version
	safari	le	3.0.3

References

docs.info.apple.com/article.html?artnum=306586

docs.info.apple.com/article.html?artnum=307041

lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html

lists.apple.com/archives/security-announce/2007/Sep/msg00001.html

secunia.com/advisories/26983

secunia.com/advisories/27643

securitytracker.com/id?1018752

www.securityfocus.com/bid/25850

www.securityfocus.com/bid/26444

www.us-cert.gov/cas/techalerts/TA07-319A.html

www.vupen.com/english/advisories/2007/3287

www.vupen.com/english/advisories/2007/3868

exchange.xforce.ibmcloud.com/vulnerabilities/36859