PT-2007-2158 · Fenrir · Portable Sleipnir+1

Publicado 2007-02-04 · Atualizado 2011-03-08 · CVE-2007-0705

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sleipnir versions 2.49 and earlier Portable Sleipnir versions 2.45 and earlier

Description A cross-zone scripting issue allows remote attackers to bypass Web content zone restrictions via certain scripts contained in RSS data.

Recommendations For Sleipnir versions 2.49 and earlier, consider disabling the processing of scripts in RSS data until a patch is available. For Portable Sleipnir versions 2.45 and earlier, restrict the execution of scripts from untrusted sources to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0705

Produtos afetados

Portable Sleipnir

Sleipnir

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-0705 · Nota de Segurança
• http://ipa.go.jp/security/vuln/documents/2006/JVN_93700808.html · Nota
• http://secunia.com/advisories/23927 · Nota
• http://osvdb.org/32977 · Nota
• http://fenrir.co.jp/press/20070126_2.html · Nota
• http://jvn.jp/jp/JVN%2393700808/index.html · Nota
• http://vupen.com/english/advisories/2007/0364 · Nota