CVE-2007-5858: XSS

Published Dec 19, 2007

Updated

WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.

Affected Software

12 affected components

Apple iOS and macOS=10.4.11

Apple iOS and macOS=10.5.1

Apple iPhone=1.0

Apple iPhone=1.02

Apple iPod touch=1.1

Apple iPod touch=1.1.1

Apple iPod touch=1.1.2

Apple iPhone OS=1.0.1

Apple iPhone OS=1.0.2

Apple iPhone OS=1.1.1

Apple iPhone OS=1.1.2

Apple Safari

Event History

Dec 19, 2007

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

09:46 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2007-5858?

CVE-2007-5858 is considered a high-severity vulnerability that allows for cross-site scripting attacks.

How do I fix CVE-2007-5858?

To fix CVE-2007-5858, users should update to the latest version of Safari and relevant Apple operating systems.

What systems are affected by CVE-2007-5858?

CVE-2007-5858 affects Safari on Mac OS X 10.4.11, 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2.

Can CVE-2007-5858 allow data theft?

Yes, CVE-2007-5858 can be exploited to conduct cross-site scripting attacks, potentially leading to data theft.

Is CVE-2007-5858 specific to Apple products?

Yes, CVE-2007-5858 specifically impacts Apple's Safari browser and associated operating systems.