CVE-2007-4431 — Apple Safari vulnerability

2 documents2 sources
Severity
6.8MEDIUMNVD
EPSS
0.4%
top 36.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedAug 20
Latest updateMay 1

Description

Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/safari3.0.3

🔴Vulnerability Details

1
GHSA
GHSA-cv6j-7mpg-hh9x: Cross-domain vulnerability in Apple Safari for Windows 3↗2022-05-01
▶