CVE-2007-2400
published 2007-06-25CVE-2007-2400: Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the…
PriorityP415medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
2.55%
83.4th percentile
Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | iphone_os | <= 1.0 | — |
| apple | safari | — | — |
| apple | safari | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://docs.info.apple.com/article.html?artnum=306173http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.htmlhttp://osvdb.org/36452http://secunia.com/advisories/26287http://www.kb.cert.org/vuls/id/289988http://www.securityfocus.com/bid/24599http://www.securitytracker.com/id?1018282http://www.vupen.com/english/advisories/2007/2316http://www.vupen.com/english/advisories/2007/2731http://docs.info.apple.com/article.html?artnum=306173http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.htmlhttp://osvdb.org/36452http://secunia.com/advisories/26287http://www.kb.cert.org/vuls/id/289988http://www.securityfocus.com/bid/24599http://www.securitytracker.com/id?1018282http://www.vupen.com/english/advisories/2007/2316http://www.vupen.com/english/advisories/2007/2731
2007-06-25
Published