CVE-2008-1006

Description

Cross-site scripting (XSS) vulnerability in WebCore, as used in Apple Safari before 3.1, allows remote attackers to inject arbitrary web script or HTML by using the window.open function to change the security context of a web page.

Risk Information

Base Score
6.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.84

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Apple Safari 3.0.4Windows
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0Mac
Multiple Vulnerabilities are affected in Apple Safari 0.8Mac
Multiple Vulnerabilities are affected in Apple Safari 0.9Mac
Multiple Vulnerabilities are affected in Apple Safari 1.2Mac
Multiple Vulnerabilities are affected in Apple Safari 1.3Mac
Multiple Vulnerabilities are affected in Apple Safari 1.3.1Mac
Multiple Vulnerabilities are affected in Apple Safari 1.3.2Mac
Multiple Vulnerabilities are affected in Apple Safari 2.0Mac
Multiple Vulnerabilities are affected in Apple Safari 2.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari 3.0Mac
Multiple Vulnerabilities are affected in Apple Safari 3.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 0.8Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 0.9Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3.2Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234