CVE-2007-2843

Apple Safari 2.0.4 - Info Disclosure

Title source: llm

Description

Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Gareth Heyes · javascriptremotemultiple
https://www.exploit-db.com/exploits/30078

Scores

EPSS 0.0588
EPSS Percentile 90.6%

Details

Status published
Products (1)
apple/safari 2.0.4
Published May 24, 2007
Tracked Since Feb 18, 2026