CVE-2007-3759
First published: Thu Sep 27 2007(Updated: )
Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPhone | =1.0 | |
| iStyle @cosme iPhone OS | =1.0.1 | |
| iStyle @cosme iPhone OS | =1.0.2 | |
| Apple Mobile Safari |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
- http://docs.info.apple.com/article.html?artnum=306586
- http://www.securityfocus.com/bid/25853
- http://securitytracker.com/id?1018752
- http://secunia.com/advisories/26983
- http://osvdb.org/38532
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36858
Frequently Asked Questions
What is the severity of CVE-2007-3759?
CVE-2007-3759 is considered a moderate severity vulnerability due to the potential for unexpected attacks when Javascript is not properly disabled.
How do I fix CVE-2007-3759?
To fix CVE-2007-3759, restart the Safari browser after disabling Javascript.
Which versions of Safari are affected by CVE-2007-3759?
CVE-2007-3759 affects Safari on Apple iPhone 1.1.1 when Javascript is requested to be disabled.
Is CVE-2007-3759 exploitable remotely?
Yes, CVE-2007-3759 can be exploited remotely if users disable Javascript without restarting Safari.
What are the possible consequences of CVE-2007-3759?
The consequences of CVE-2007-3759 include exposure to web-based exploits that could manipulate the browser's behavior.
- collector/nvd-historical
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/remedy
- agent/softwarecombine
- agent/description
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/apple iphone
- version/apple iphone/1.0
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/1.0.1
- version/istyle @cosme iphone os/1.0.2
- canonical/apple mobile safari