CVE-2007-3482: XSS

Published Jun 28, 2007

Updated

Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute.

Affected Software

2 affected components

Microsoft Windows NT=3.0.1

Safari

Event History

Jun 28, 2007

CVE Published

06:30 PM

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3482?

CVE-2007-3482 is considered a medium severity vulnerability due to its potential to allow unauthorized access to restricted data across domains.

How do I fix CVE-2007-3482?

To fix CVE-2007-3482, users should update their Apple Safari browser to the latest version that addresses this vulnerability.

Who is affected by CVE-2007-3482?

CVE-2007-3482 affects users of Apple Safari browser version 3.0.1 on Windows systems.

What type of vulnerability is CVE-2007-3482?

CVE-2007-3482 is a cross-domain vulnerability that allows JavaScript to bypass the same origin policy.

Can CVE-2007-3482 be exploited remotely?

Yes, CVE-2007-3482 can be exploited remotely by attackers through malicious scripts executed in the Safari browser.