CVE-2008-1007

WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site…

published March 19, 2008

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site scripting (XSS) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02796 · 86.3th percentile
Published
2008-03-19T00:00Z
EPSS history
Timeline
  • 19 MAR 00:00Z
    WebCore, as used in Apple Safari before 3.1, does not enforce the frame navigation policy for Java applets, which allows remote attackers to conduct cross-site…
    cvelistv5