CVE-2007-2580

Description (CNA)

Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://www.securityfocus.com/archive/1/468719/100/0/threaded
• http://www.securityfocus.com/archive/1/467676/100/0/threaded
• http://securityreason.com/securityalert/2685
• http://www.securityfocus.com/archive/1/468650/100/0/threaded
• http://www.securityfocus.com/archive/1/468639/100/0/threaded
• http://www.securityfocus.com/archive/1/468737/100/0/threaded
• http://www.securityfocus.com/archive/1/468727/100/0/threaded
• http://www.securityfocus.com/bid/23825
• http://www.securityfocus.com/archive/1/468869/100/0/threaded
• http://www.securityfocus.com/archive/1/468544/100/0/threaded
• http://www.osvdb.org/35569
• http://www.securityfocus.com/archive/1/468585/100/0/threaded

ADP enrichment