Lucene search

[email protected]CVE-2007-2408

HistoryAug 03, 2007 - 8:17 p.m.

CVE-2007-2408

2007-08-0320:17:00

CWE-20

[email protected]

web.nvd.nist.gov

apple safari

java applets

remote execution

web browser vulnerability

cve-2007-2408

6.5 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.2%

JSON

WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked “Enable Java” setting, which allows remote attackers to execute Java applets via a crafted web page.

CPENameOperatorVersion
apple:safariapple safarieq3.0.1
apple:safariapple safarieq3.0.2

CPE	Name	Operator	Version
apple:safari	apple safari	eq	3.0.1
apple:safari	apple safari	eq	3.0.2

References

docs.info.apple.com/article.html?artnum=306174

isc.sans.org/diary.html?storyid=3214

www.securityfocus.com/bid/25157

www.vupen.com/english/advisories/2007/2730

exchange.xforce.ibmcloud.com/vulnerabilities/35714

6.5 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.2%

JSON

Related for CVE-2007-2408

seebug2 prion1 nessus1