CVE-2004-0720: High severity Safari vulnerability
Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0720?
CVE-2004-0720 is classified as a moderate severity vulnerability due to its potential for web site spoofing and frame injection attacks.
How do I fix CVE-2004-0720?
To mitigate CVE-2004-0720, it is recommended to upgrade to a later version of Safari that does not have this vulnerability.
What systems are affected by CVE-2004-0720?
CVE-2004-0720 specifically affects Apple Safari version 1.2.2.
What kind of attacks can CVE-2004-0720 facilitate?
CVE-2004-0720 can facilitate attacks such as web site spoofing and unauthorized content injection into web pages.
Is there a workaround for CVE-2004-0720?
A workaround for CVE-2004-0720 is to avoid using Safari 1.2.2 and instead use a more secure browser until an update can be applied.