CVE-2007-3759

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-27 · updated 2026-06-16
Weakness: CWE-16

Description

Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect.

Affected products

Apple Safari: all versions

References

http://docs.info.apple.com/article.html?artnum=306586
http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
http://osvdb.org/38532
http://secunia.com/advisories/26983
http://securitytracker.com/id?1018752
http://www.securityfocus.com/bid/25853
https://exchange.xforce.ibmcloud.com/vulnerabilities/36858
http://docs.info.apple.com/article.html?artnum=306586
http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
http://osvdb.org/38532
http://secunia.com/advisories/26983
http://securitytracker.com/id?1018752

Get alerted when CVE-2007-3759 or the next vulnerability affects your stack