CVE-2007-2398
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title...
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.
Exploit likelihood
What each source reports
NVD Score used
7.1
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.
- Record
CVE-2007-2398- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:C/A:N - Updated
- 2026-11-02
CVE List No score
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.
- Record
CVE-2007-2398- Updated
- 2026-11-02
EUVDEUVD-2007-2393 No score
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.
- Record
EUVD-2007-2393- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7vvf-9wv5-9fw7 No score
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title...
Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks.
- Record
GHSA-7vvf-9wv5-9fw7- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2398 is a high vulnerability (CVSS 7.1) in Apple Safari, published June 21, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.56%, the 85th percentile. No source names a fixed version.
References
osvdb.org/38862
support.apple.com/kb/HT1467
vupen.com/english/advisories/2007/2316
vupen.com/english/advisories/2008/0979/references
lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html
lists.apple.com/archives/security-announce/2008/Apr/msg00001.html
Show 8 moreShow less
securitytracker.com/id?1018282
archives.neohapsis.com/archives/fulldisclosure/2007-06/0311.html
exchange.xforce.ibmcloud.com/vulnerabilities/35050
securityfocus.com/archive/1/471452/100/0/threaded
securityfocus.com/bid/24484
securityfocus.com/archive/1/471454/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2007-2398
github.com/advisories/GHSA-7vvf-9wv5-9fw7