CVE-2007-3758

CVE-2007-3758 affects Safari on Apple iPhone 1.1.1 and Safari 3 prior to Beta Update 3.0.4, on Windows, and Mac OS X 10.4–10.4.10. Root cause: JavaScript window properties can be set across domain boundaries, enabling cross-site scripting (XSS). Impact as described: remote XSS vector. Remediation...

CVE-2007-3761

CVE-2007-3761 affects Safari on Apple iPhone 1.1.1 and is a Cross-site scripting (XSS) vulnerability. The issue arises from Javascript events being applied to a frame in another domain, enabling remote attackers to inject arbitrary web script or HTML. The public records show a MEDIUM severity (CV...

PT-2007-5000 · Apple · Iphone +1

Name of the Vulnerable Software and Affected Versions: Apple iPhone version 1.1.1 Description: The issue concerns Safari not fully disabling Javascript when requested, potentially leaving it open to unexpected attacks until Safari is restarted. Recommendations: For Apple iPhone version 1.1.1,...