PT-2007-5853 · Apple · Webcore+1

Published 2007-11-15 · Updated 2017-07-29 · CVE-2007-4695

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Apple Mac OS X versions 10.4 through 10.4.10

Description: The issue is related to an unspecified "input validation" vulnerability in WebCore, allowing remote attackers to modify form field values. This is achieved via unknown vectors related to file uploads.

Recommendations: For Apple Mac OS X versions 10.4 through 10.4.10, consider restricting file uploads or implementing additional validation mechanisms to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4695

Affected Products

Macos X

Webcore

References · 9

• http://secunia.com/advisories/27643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4695 · Security Note
• http://vupen.com/english/advisories/2007/3868 · Note
• http://us-cert.gov/cas/techalerts/TA07-319A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38482 · Note
• http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/26444 · Note
• http://securitytracker.com/id?1018948 · Note
• http://docs.info.apple.com/article.html?artnum=307041 · Note