CVE-2005-0976

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.004

Percentile

74.4%

JSON

AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.

Affected configurations

Nvd

Node

applesafariMatch1.2

hmdtshiiraMatch0.93

omnigroupomniwebMatch5.1

VendorProductVersionCPE
applesafari1.2cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*
hmdtshiira0.93cpe:2.3:a:hmdt:shiira:0.93:*:*:*:*:*:*:*
omnigroupomniweb5.1cpe:2.3:a:omnigroup:omniweb:5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	safari	1.2	cpe:2.3:a:apple:safari:1.2:::::::*
hmdt	shiira	0.93	cpe:2.3:a:hmdt:shiira:0.93:::::::*
omnigroup	omniweb	5.1	cpe:2.3:a:omnigroup:omniweb:5.1:::::::*