Lucene search

K
cveMitreCVE-2007-3274
HistoryJun 19, 2007 - 9:30 p.m.

CVE-2007-3274

2007-06-1921:30:00
CWE-399
mitre
web.nvd.nist.gov
44
apple safari
windows xp
denial of service
javascript
cve-2007-3274
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6

Confidence

High

EPSS

0.004

Percentile

73.3%

Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via JavaScript that sets the document.location variable, as demonstrated by an empty value of document.location.

Affected configurations

Nvd
Node
microsoftwindows_xpsp2
AND
applesafariMatch3.0
OR
applesafariMatch3.0.1
VendorProductVersionCPE
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
applesafari3.0cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*
applesafari3.0.1cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6

Confidence

High

EPSS

0.004

Percentile

73.3%

Related for CVE-2007-3274