CVE-2007-2391: XSS

Published Jun 14, 2007

Updated

Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page.

Affected Software

1 affected component

Safari=3.0.1

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2007/Jun/msg00000.html

Event History

Jun 14, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2391?

CVE-2007-2391 has been classified with a moderate severity due to potential XSS vulnerabilities that can lead to unauthorized actions on behalf of users.

How do I fix CVE-2007-2391?

To fix CVE-2007-2391, update to a later version of Safari that addresses this vulnerability.

What platforms are affected by CVE-2007-2391?

CVE-2007-2391 affects Apple Safari version 3.0.1 specifically on Windows operating systems.

What type of vulnerability is CVE-2007-2391?

CVE-2007-2391 is a cross-site scripting (XSS) vulnerability that allows attackers to inject scripts into web pages.

Can CVE-2007-2391 be exploited remotely?

Yes, CVE-2007-2391 can be exploited remotely by attackers through a specially crafted web page.