Lucene search

K
cve[email protected]CVE-2007-1308
HistoryMar 07, 2007 - 12:19 a.m.

CVE-2007-1308

2007-03-0700:19:00
CWE-399
web.nvd.nist.gov
38
cve-2007-1308
kde javascript
konqueror
denial of service
null pointer dereference

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.957 High

EPSS

Percentile

99.4%

ecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote attackers to cause a denial of service (crash) by accessing the content of an iframe with an ftp:// URI in the src attribute, probably due to a NULL pointer dereference.

CPENameOperatorVersion
kde:konquerorkde konqueroreq3.5.5

6.3 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.957 High

EPSS

Percentile

99.4%