CVE-2007-3186

Apple Safari - Access Control

Title source: rule

Description

Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Thor Larholm · htmlremotewindows

https://www.exploit-db.com/exploits/30176

View Code ZIP pw:eip

References (10)

[Various Sources] http://larholm.com/2007/06/12/safari-for-windows-0day-exploit-in-2-hours

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/471176/100/0/threaded

[Third Party Advisory, VDB Entry] http://osvdb.org/38542

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/34824

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2192

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/24434

[Mailing List] http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063926.html

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1018224

[Various Sources] http://larholm.com/2007/06/14/safari-301-released/

[Mailing List] http://lists.apple.com/archives/security-announce/2007/Jun/msg00000.html

Scores

EPSS 0.0925

EPSS Percentile 92.7%

Details

CWE

CWE-264

Status published

Products (8)

apple/safari

apple/safari 2.0

apple/safari 2.0.1

apple/safari 2.0.2

apple/safari 2.0.3

apple/safari 2.0.4

apple/safari 3.0

apple/safari 3.0.1

Published Jun 12, 2007

Tracked Since Feb 18, 2026