Lucene search
HistoryAug 03, 2007 - 10:17 a.m.
CVE-2007-2410
cve-2007-2410
webcore
apple
mac os x
cross-site scripting
xss
security vulnerability
nvd
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.3%
WebCore on Apple Mac OS X 10.3.9 and 10.4.10 retains properties of certain global objects when a new URL is visited in the same window, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apple:webcore | apple webcore | eq | * |
References
Related
prion
prion
Cross site scripting
2007-08-03 10:17:00
seebug
seebug
Mac OS X 2007-007更新修复多个安全漏洞
2007-08-02 00:00:00
nessus
nessus
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
2007-08-02 00:00:00
5.5 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.3%
Related for CVE-2007-2410