MitreCVE-2007-6640CVE-2007-6640
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
74.1%
Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sourceforge | creammonkey | 0.9 | cpe:2.3:a:sourceforge:creammonkey:0.9:*:*:*:*:*:*:* |
| sourceforge | creammonkey | 1.0 | cpe:2.3:a:sourceforge:creammonkey:1.0:*:*:*:*:*:*:* |
| sourceforge | creammonkey | 1.1 | cpe:2.3:a:sourceforge:creammonkey:1.1:*:*:*:*:*:*:* |
| sourceforge | greasekit | 1.2 | cpe:2.3:a:sourceforge:greasekit:1.2:*:*:*:*:*:*:* |
| sourceforge | greasekit | 1.3 | cpe:2.3:a:sourceforge:greasekit:1.3:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
74.1%