CVE-2007-3514

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

03/07/2007

Last modified:

09/04/2025

Description

Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute to a file:// location, a different vector than CVE-2007-3482.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:C/I:P/A:N CVSS v2.0 Severity and Metrics:

Base Score: 8.50 HIGH
Vector: AV:N/AC:L/Au:N/C:C/I:P/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Physical
Availability (A): None