CVE-2007-3759: Medium severity Apple iPhone vulnerability
Published Sep 27, 2007
·Updated
Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect.
Affected Software
4 affected components
Apple iPhone=1.0
iPhone OS=1.0.1
iPhone OS=1.0.2
Safari
Remediation
Event History
Sep 27, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
10:17 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-3759?
CVE-2007-3759 is considered a moderate severity vulnerability due to the potential for unexpected attacks when Javascript is not properly disabled.
2
How do I fix CVE-2007-3759?
To fix CVE-2007-3759, restart the Safari browser after disabling Javascript.
3
Which versions of Safari are affected by CVE-2007-3759?
CVE-2007-3759 affects Safari on Apple iPhone 1.1.1 when Javascript is requested to be disabled.
4
Is CVE-2007-3759 exploitable remotely?
Yes, CVE-2007-3759 can be exploited remotely if users disable Javascript without restarting Safari.
5
What are the possible consequences of CVE-2007-3759?
The consequences of CVE-2007-3759 include exposure to web-based exploits that could manipulate the browser's behavior.