critical10.0Public exploit code
CVE-2007-2843
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Safari 2.0.4 - Cross-Domain Browser Location Information Disclosure2007-05-23 · remote · multiple · Verified
Impact
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | Version 2.0.4 |
References
- NVD record
- CVE.org record
- http://osvdb.org/38859
- http://www.businessinfo.co.uk/labs/googlesnoop/snoop.html
- http://www.securityfocus.com/bid/24121
- http://www.thespanner.co.uk/2007/05/18/safari-needs-fixing/
- http://osvdb.org/38859
- http://www.businessinfo.co.uk/labs/googlesnoop/snoop.html
- http://www.securityfocus.com/bid/24121
- http://www.thespanner.co.uk/2007/05/18/safari-needs-fixing/