CVE-2007-6592: Apple Safari

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Apple Safari 2, when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, regards the certificate as also accepted for all domain names in subjectAltName:dNSName fields, which makes it easier for remote attackers to trick a user into accepting an invalid certificate for a spoofed web site.

Affected products

• Apple Safari: version 2 only

Published 2007-12-28. Last modified 2026-06-16.