CVE-2004-0720: Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belon...

Security readout for executives and security teams

Safari 1.2.2 had a frame isolation weakness where one website could place content into a frame belonging to another site. That could make users trust attacker-controlled content as if it came from a legitimate page. The bundle does not include CVSS, a vendor patch, or evidence of active exploitation. Likely limited to environments still running Safari 1.2.2 or similarly affected legacy browser builds. The source bundle names Safari 1.2.2 but provides no complete product inventory, CPE mapping, or platform scope. Treat this as a legacy-technology exposure check, not an emergency based on the provided evidence. Priority should be higher if regulated, payment, identity, or admin workflows are accessed from old Safari installations. Mitigation focus: Check Apple or vendor guidance for any historical fixed version.; Retire Safari 1.2.2 from managed endpoints and kiosks.; Require supported browsers for sensitive internal and customer-facing workflows..

Prepared

Jun 30, 2026, 04:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.