CVE-2007-3482
Apple Safari for Windows 3.0.1 - Cross-Site Scripting via JavaScript Document Overwrite
Title source: llmDescription
Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute.
References (3)
Core 3
Core References
Various Sources x_refsource_misc
http://www.0x000000.com/?i=371
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24700
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38860
Scores
EPSS
0.0150
EPSS Percentile
71.7%
Details
CWE
CWE-79
Status
published
Products (1)
apple/safari
Published
Jun 28, 2007
Tracked Since
Feb 18, 2026