CVE-2007-3758: XSS
Published Sep 27, 2007
·Updated
Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10.4 through 10.4.10, allows remote attackers to set Javascript window properties for web pages that are in a different domain, which can be leveraged to conduct cross-site scripting (XSS) attacks.
Affected Software
16 affected components
Apple iPhone OS=1.1.1
Apple Safari
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.4.3
Apple iOS and macOS=10.4.4
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.4.10
Microsoft Windows Vista
Microsoft Windows XP
Apple Safari<=3.0.3
Remediation
Event History
Sep 27, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
10:17 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-3758?
CVE-2007-3758 has a moderate severity rating due to its potential to allow cross-site scripting (XSS) attacks.
2
How do I fix CVE-2007-3758?
To fix CVE-2007-3758, update Safari to version 3.0.4 or later on affected systems.
3
Which versions of Safari are affected by CVE-2007-3758?
CVE-2007-3758 affects Safari versions prior to 3.0.4.
4
On which operating systems does CVE-2007-3758 impact Safari?
CVE-2007-3758 impacts Safari on Windows and Mac OS X version 10.4 through 10.4.10.
5
What vulnerability type is CVE-2007-3758 classified as?
CVE-2007-3758 is classified as a cross-site scripting (XSS) vulnerability.