PT-2007-2158 · Fenrir · Portable Sleipnir+1

Published 2007-02-04 · Updated 2011-03-08 · CVE-2007-0705

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sleipnir versions 2.49 and earlier Portable Sleipnir versions 2.45 and earlier

Description A cross-zone scripting issue allows remote attackers to bypass Web content zone restrictions via certain scripts contained in RSS data.

Recommendations For Sleipnir versions 2.49 and earlier, consider disabling the processing of scripts in RSS data until a patch is available. For Portable Sleipnir versions 2.45 and earlier, restrict the execution of scripts from untrusted sources to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0705

Affected Products

Portable Sleipnir

Sleipnir

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-0705 · Security Note
• http://ipa.go.jp/security/vuln/documents/2006/JVN_93700808.html · Note
• http://secunia.com/advisories/23927 · Note
• http://osvdb.org/32977 · Note
• http://fenrir.co.jp/press/20070126_2.html · Note
• http://jvn.jp/jp/JVN%2393700808/index.html · Note
• http://vupen.com/english/advisories/2007/0364 · Note