VulnerabilityModified

CVE-2007-2400

Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site…

MEDIUM 4.3EPSS 2.55%

Does this matter?

Lower severity and a low EPSS score (2.55%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 2.55% probability · 84th percentile
CISA KEV: Not listed
Weakness: CWE-79, CWE-362
Affected: apple/iphone os · apple/safari
Source: cve@mitre.org

References

http://docs.info.apple.com/article.html?artnum=306173Vendor Advisory
http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.htmlPatch, Vendor Advisory
http://osvdb.org/36452
http://secunia.com/advisories/26287Vendor Advisory
http://www.kb.cert.org/vuls/id/289988US Government Resource
http://www.securityfocus.com/bid/24599Patch
http://www.securitytracker.com/id?1018282Patch
http://www.vupen.com/english/advisories/2007/2316Vendor Advisory
http://www.vupen.com/english/advisories/2007/2731Vendor Advisory
http://docs.info.apple.com/article.html?artnum=306173Vendor Advisory
http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.htmlPatch, Vendor Advisory
http://osvdb.org/36452
http://secunia.com/advisories/26287Vendor Advisory
http://www.kb.cert.org/vuls/id/289988US Government Resource
http://www.securityfocus.com/bid/24599Patch
http://www.securitytracker.com/id?1018282Patch
http://www.vupen.com/english/advisories/2007/2316Vendor Advisory
http://www.vupen.com/english/advisories/2007/2731Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.