Description
Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html ↗
- http://docs.info.apple.com/article.html?artnum=306586 ↗
- http://www.securityfocus.com/bid/26444 ↗
- http://lists.apple.com/archives/Security-announce/2007/Nov/msg00003.html ↗
- http://docs.info.apple.com/article.html?artnum=307041 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36862 ↗
- http://secunia.com/advisories/26983 ↗
- http://www.vupen.com/english/advisories/2007/3868 ↗
- http://www.securityfocus.com/bid/25852 ↗
- http://www.vupen.com/english/advisories/2007/3287 ↗
- http://secunia.com/advisories/27643 ↗
- http://www.us-cert.gov/cas/techalerts/TA07-319A.html ↗
- http://securitytracker.com/id?1018752 ↗