CVE-2007-0478

CVE-2007-0478 affects Apple Mac OS X 10.3.9/10.4.10 as used by Safari. WebCore parses HTML comments in TITLE elements incorrectly, allowing remote attackers to bypass some XSS protections and embed certain HTML tags within a comment to trigger cross-site scripting. The vulnerability is documented...

CVE-2007-2410

CVE-2007-2410 affects WebCore component on Apple Mac OS X 10.3.9 and 10.4.10. The flaw causes WebCore to retain properties of certain global objects when a new URL loads in the same window, enabling remote XSS attacks. The impact is cross-site scripting, as described in the CVE entry. Apple relea...

CVE-2007-2409

CVE-2007-2409 affects WebCore on Mac OS X 10.3.9 and 10.4.10; the issue is a cross-domain information disclosure via a popup window that can read the parent window URL. It is caused by WebCore’s handling of popup windows, enabling remote attackers to obtain sensitive information. Apple’s public a...