CVE-2007-3760: XSS
Published Sep 27, 2007
·Updated
Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to inject arbitrary web script or HTML via frame tags.
Affected Software
16 affected components
Apple iPhone OS=1.1.1
Apple Safari
Apple iOS and macOS=10.4
Apple iOS and macOS=10.4.1
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.4.3
Apple iOS and macOS=10.4.4
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.4.6
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.4.9
Apple iOS and macOS=10.4.10
Microsoft Windows Vista
Microsoft Windows XP
Apple Safari<=3.0.3
Remediation
Event History
Sep 27, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
10:17 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-3760?
CVE-2007-3760 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2007-3760?
To fix CVE-2007-3760, users should update to the latest version of Safari that is not affected by this vulnerability.
3
What systems are vulnerable to CVE-2007-3760?
CVE-2007-3760 affects Safari versions prior to Beta Update 3.0.4 on Windows and Mac OS X, as well as Apple iPhone OS 1.1.1.
4
What type of vulnerability is CVE-2007-3760?
CVE-2007-3760 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2007-3760 be exploited remotely?
Yes, CVE-2007-3760 can be exploited remotely to inject arbitrary web scripts or HTML via frame tags.