CVE-2007-2398

CVE-2007-2398 concerns Apple Safari 3.0.1 beta (522.12.12) on Windows. The flaw allows remote attackers to spoof the window title and address bar by manipulating the location bar and using setTimeout() to trigger an event that changes the main window content, potentially enabling phishing. This i...