CVE-2007-4431
published 2007-08-20CVE-2007-4431: Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones…
PriorityP424medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
1.34%
68.5th percentile
Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | safari | <= 3.0.3 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/46720http://sla.ckers.org/forum/read.php?3%2C14151http://www.0x000000.com/index.php?i=420http://www.securityfocus.com/bid/25355http://www.thespanner.co.uk/2007/08/17/safari-beta-zero-day/http://osvdb.org/46720http://sla.ckers.org/forum/read.php?3%2C14151http://www.0x000000.com/index.php?i=420http://www.securityfocus.com/bid/25355http://www.thespanner.co.uk/2007/08/17/safari-beta-zero-day/
2007-08-20
Published