Safari Security Vulnerabilities and Issues — Safari CVE List

Lucene search

AppleSafari

3 matches found

CVE•added 2007/12/19 9:46 p.m.•44 views

CVE-2007-5858

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.

4.3CVSS7.9AI score0.01025EPSS

CVE•added 2007/12/19 9:46 p.m.•37 views

CVE-2007-5859

Unspecified vulnerability in Safari RSS in Apple Mac OS X 10.4.11 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted feed: URL that triggers memory corruption.

9.3CVSS9.1AI score0.22265EPSS

CVE•added 2007/12/28 9:46 p.m.•36 views

CVE-2007-6592

Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid cert...

4.3CVSS6.1AI score0.00153EPSS