Description
Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute to a file:// location, a different vector than CVE-2007-3482.
References (2)
Core 2
Core References
Various Sources x_refsource_misc
http://www.0x000000.com/?i=371
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/38861
Scores
EPSS
0.0133
EPSS Percentile
68.1%
Details
Status
published
Products (1)
apple/safari
3.0.2
Published
Jul 03, 2007
Tracked Since
Feb 18, 2026