PT-2007-5853 · Apple · Webcore+1

Publicado 2007-11-15 · Atualizado 2017-07-29 · CVE-2007-4695

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.4 through 10.4.10

Description: The issue is related to an unspecified "input validation" vulnerability in WebCore, allowing remote attackers to modify form field values. This is achieved via unknown vectors related to file uploads.

Recommendations: For Apple Mac OS X versions 10.4 through 10.4.10, consider restricting file uploads or implementing additional validation mechanisms to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-4695

Produtos afetados

Macos X

Webcore

Referências · 9

• http://vupen.com/english/advisories/2007/3868 · Nota
• http://us-cert.gov/cas/techalerts/TA07-319A.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38482 · Nota
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/26444 · Nota
• http://secunia.com/advisories/27643 · Aviso do Fabricante
• http://securitytracker.com/id?1018948 · Nota
• http://docs.info.apple.com/article.html?artnum=307041 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4695 · Nota de Segurança