Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1025
HistoryApr 17, 2008 - 12:00 a.m.

CVE-2008-1025

2008-04-1700:00:00
ubuntu.com
ubuntu.com
12

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.6%

Cross-site scripting (XSS) vulnerability in Apple WebKit, as used in Safari
before 3.1.1, allows remote attackers to inject arbitrary web script or
HTML via a crafted URL with a colon in the hostname portion.

Notes

Author Note
mdeslaur this bug doesn’t affect qt4-x11 as per debian bug.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

75.6%