CVE-2007-2398: High severity Microsoft Windows 2003 Server vulnerability

Published Jun 21, 2007

Updated

Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.

Affected Software

2 affected components

Microsoft Windows 2003 Server=sp2

Safari=3.0.1

Event History

Jun 21, 2007

CVE Published

10:30 AM

Data Sourced

10:30 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2398?

CVE-2007-2398 has been classified as a medium-profile vulnerability due to its potential to facilitate phishing attacks.

How do I fix CVE-2007-2398?

To mitigate CVE-2007-2398, users should upgrade to a newer version of Apple Safari that addresses this vulnerability.

What software is affected by CVE-2007-2398?

CVE-2007-2398 specifically affects Apple Safari version 3.0.1 on Windows.

What type of attack does CVE-2007-2398 facilitate?

CVE-2007-2398 can facilitate phishing attacks by allowing remote attackers to modify the window title and address bar.

Is CVE-2007-2398 a client-side or server-side vulnerability?

CVE-2007-2398 is a client-side vulnerability that affects the Safari browser's handling of window content.