← Database

CVE-2007-4431

MEDIUM CVSS: 6.8 Published: 2007-08-20 Modified: 2026-06-16

Description

Cross-domain vulnerability in Apple Safari for Windows 3.0.3 and earlier allows remote attackers to bypass the Same Origin Policy, with access from local zones to external domains, via a certain body.innerHTML property value, aka "classic JavaScript frame hijacking."

Affected Platforms

Apple Safari

Weakness Type

NVD-CWE-Other

References