CVE-2007-3514

EPSS 0.17%
Published 03.07.2007 10:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute to a file:// location, a different vector than CVE-2007-3482.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ Safari Version3.0.2 Editionwindows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.17%	0.38

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.5	10	7.8	AV:N/AC:L/Au:N/C:C/I:P/A:N

http://www.0x000000.com/?i=371

http://osvdb.org/38861

https://nvd.nist.gov/vuln/detail/CVE-2007-3514

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3514

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3514

EUVD