Vulnerabilities > CVE-2007-2580 - Local vulnerability in Apple Safari

047910
CVSS 1.9 - LOW
Attack vector
LOCAL
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
apple
exploit available
NVD
Published: 2007-05-09
Updated: 2018-10-16

Summary

Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.

Vulnerable Configurations

Part Description Count
Application
Apple
1

Exploit-Db

descriptionApple 2.0.4 Safari Unspecified Local Vulnerability. CVE-2007-2580. Local exploit for osx platform
idEDB-ID:29950
last seen2016-02-03
modified2007-05-04
published2007-05-04
reporterpoplix
sourcehttps://www.exploit-db.com/download/29950/
titleApple <= 2.0.4 Safari Unspecified Local Vulnerability

References