CVE-2007-2398

Description

Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.

Risk Information

Base Score

5.3

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

1.621

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Apple Safari 3.0.1	Windows
Multiple Vulnerabilities are affected in Apple Safari 3.0.1_windows	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234