Apple · Safari · CVE-2007-2400
**Name of the Vulnerable Software and Affected Versions**
Apple Safari versions 3 Beta through 3.0.2
Apple Safari on iPhone version prior to 1.0.1
**Description**
The issue allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain, conducting cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects.
**Recommendations**
For Apple Safari versions 3 Beta through 3.0.2, update to version 3.0.2 or later to resolve the issue.
For Apple Safari on iPhone version prior to 1.0.1, update to version 1.0.1 or later to resolve the issue.