Vulnerability Description
WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | 10.4.11 |
| Apple | Iphone | 1.0 |
| Apple | Ipod Touch | 1.1 |
| Apple | Iphone Os | 1.0.1 |
| Apple | Safari | All versions |
Related Weaknesses (CWE)
References
- http://docs.info.apple.com/article.html?artnum=307178
- http://docs.info.apple.com/article.html?artnum=307179
- http://docs.info.apple.com/article.html?artnum=307302
- http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
- http://lists.apple.com/archives/security-announce/2008/Jan/msg00000.html
- http://secunia.com/advisories/28136Vendor Advisory
- http://secunia.com/advisories/28497Vendor Advisory
- http://securitytracker.com/id?1019108
- http://www.securityfocus.com/bid/26911
- http://www.us-cert.gov/cas/techalerts/TA07-352A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2007/4238Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0147Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39091
- http://docs.info.apple.com/article.html?artnum=307178
- http://docs.info.apple.com/article.html?artnum=307179
FAQ
What is CVE-2007-5858?
CVE-2007-5858 is a vulnerability with a CVSS score of 4.3 (MEDIUM). WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be le...
How severe is CVE-2007-5858?
CVE-2007-5858 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-5858?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X, Apple Iphone, Apple Ipod Touch, Apple Iphone Os, Apple Safari.