Unscored CVE-2007-2391 EUVD-2007-2386GHSA-rhhq-2rwf-cr4q

Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or H…

Published Jun 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page.

References

safari-settimeout-security-bypass(34847) vdb-entry
ADV-2007-2192 vdb-entry
20070613 Re: [Full-disclosure] Apple Safari: cookie stealing mailing-list
24457 vdb-entry
1018238 vdb-entry
20070613 Apple Safari: cookie stealing mailing-list
36605 vdb-entry
APPLE-SA-2007-06-14 vendor-advisory