exploits , vulnerabilities , articles , Apple iPhone Safari Browser Same Domain Content Manipulation Vulnerability

Title	Apple iPhone Safari Browser Same Domain Content Manipulation Vulnerability
Published	2007-09-27-12:00AM
Updated	2007-11-15-12:40AM
Class	Unknown
CVE	CVE-2007-4671
Remote	Yes
Local	No
Credit	These issues were disclosed be the vendor. The vendor credits Keigo Yamazaki of Little eArth Corporation Co., Ltd. with the discovery of this issue.
Vulnerable	Apple Safari 3 Beta for Windows Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple iPhone 1.0.1 Apple iPhone 1 Apple iPhone 0
Not Vulnerable	Apple Mac OS X Server 10.4.11 Apple Mac OS X 10.4.11 Apple iPhone 1.1.1
Code	To exploit this issue, an attacker will have to entice a victim into visiting a malicious webpage that is hosted in the same domain as the target HTTPS pages.
TXT