← Database

CVE-2007-4671

MEDIUM CVSS: 6.8 Published: 2007-09-27 Modified: 2026-06-16

Description

Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4 through 10.4.10, allows remote attackers to "alter or access" HTTPS content via an HTTP session with a crafted web page that causes Javascript to be applied to HTTPS pages from the same domain.

Affected Platforms

Apple SafariMicrosoft Windows XpApple Mac Os XApple Iphone OsMicrosoft Windows Vista

Weakness Type

CWE-20

References