漏洞信息详情
CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPhone Safari浏览器禁用Javascript失效漏洞
- CNNVD编号:CNNVD-200709-412
- 危害等级: 中危
- CVE编号: CVE-2007-3759
- 漏洞类型: 配置错误
- 发布时间: 2007-09-27
- 威胁类型: 远程
- 更新时间: 2007-10-01
- 厂 商: CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
- 漏洞来源: CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
漏洞简介
CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPhone是美国苹果(CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple)公司的一款智能手机。
iPhone中内嵌的Safar浏览器不能实时禁用Javascript,可能导致错误的安全假设。
可以将iPhone中内嵌的Safar浏览器配置为禁用Javascript,但在下一次重启Safari之前这个偏好不会生效,而仅有重启了iPhone后才会重启Safar浏览器,因此这可能误导用户相信已经禁用了Javascript但实际上并未禁用。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
http://www.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/itunes/download/iTunesSetup.exe
参考网址
来源: CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple
名称: CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple-SA-2007-09-27
链接:http://lists.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/archives/security-announce/2007/Sep/msg00001.HTML
来源: OSVDB
名称: 38532
链接:http://osvdb.org/38532
来源: XF
名称: iPhone-Javascript-weak-security(36858)
链接:http://xforce.iss.net/xforce/xfdb/36858
来源: BID
名称: 25853
链接:http://www.securityfocus.com/bid/25853
来源: SECTRACK
名称: 1018752
链接:http://securitytracker.com/id?1018752
来源: SECUNIA
名称: 26983
链接:http://secunia.com/advisories/26983
来源: docs.info.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com
链接:http://docs.info.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/article.HTML?artnum=306586
受影响实体
- CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPhone:1.0
- CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPhone:1.0.1
- CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iPhone:1.0.2
补丁
暂无
评论