CVE-2007-2580

Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.

Score

CVSS 2.0 1.9 Low

Status

Modified - cve@mitre.org

Published

2007-05-09

Last modified

2024-08-07

Affected products

• Safari (Apple)

References

• http://securityreason.com/securityalert/2685
• http://www.osvdb.org/35569
• http://www.securityfocus.com/archive/1/467676/100/0/threaded
• http://www.securityfocus.com/archive/1/468544/100/0/threaded
• http://www.securityfocus.com/archive/1/468585/100/0/threaded
• http://www.securityfocus.com/archive/1/468639/100/0/threaded
• http://www.securityfocus.com/archive/1/468650/100/0/threaded
• http://www.securityfocus.com/archive/1/468719/100/0/threaded
• http://www.securityfocus.com/archive/1/468727/100/0/threaded
• http://www.securityfocus.com/archive/1/468737/100/0/threaded
• http://www.securityfocus.com/archive/1/468869/100/0/threaded
• http://www.securityfocus.com/bid/23825