CVE-2007-2580
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 0.7%
from disclosure to weapon0 days
Published on NVDMay 9
1st PoCMay 4
exploitation probability
0.7%top 49% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/29950⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://securityreason.com/securityalert/2685http://www.osvdb.org/35569http://www.securityfocus.com/archive/1/467676/100/0/threadedhttp://www.securityfocus.com/archive/1/468544/100/0/threadedhttp://www.securityfocus.com/archive/1/468585/100/0/threadedhttp://www.securityfocus.com/archive/1/468639/100/0/threadedhttp://www.securityfocus.com/archive/1/468650/100/0/threadedhttp://www.securityfocus.com/archive/1/468719/100/0/threadedhttp://www.securityfocus.com/archive/1/468727/100/0/threadedhttp://www.securityfocus.com/archive/1/468737/100/0/threadedhttp://www.securityfocus.com/archive/1/468869/100/0/threadedhttp://www.securityfocus.com/bid/23825