Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-2386 State: PUBLISHED Published: 2007-05-24T22:00:00 Last Updated: 2024-08-07T13:33:28.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - http://www.securityfocus.com/bid/24159 - http://www.vupen.com/english/advisories/2007/1939 - http://www.kb.cert.org/vuls/id/221876 - http://lists.apple.com/archives/security-announ
m/english/advisories/2007/1939 - http://www.kb.cert.org/vuls/id/221876 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.osvdb.org/35142 - http://lists.apple.com/archives/security-announce/2007/Jun/msg00001.html - http://www.vupen.com/english/advisories/2007/2269 - http://www.securityfocus.com/bid/24144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34493 - http://www.securitytracker.com/id?1018123 - http://secunia.com/advisories/25745
CVE ID: CVE-2007-2387 State: PUBLISHED Published: 2007-06-04T17:00:00 Last Updated: 2024-08-07T13:33:28.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/May/msg00006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34651 - http://osvdb.org/36128 - http://www.securitytracker.com/id?1018181 - http://www.securityfocus.co
vulnerabilities/34651 - http://osvdb.org/36128 - http://www.securitytracker.com/id?1018181 - http://www.securityfocus.com/bid/24257 - http://www.vupen.com/english/advisories/2007/2014 - http://secunia.com/advisories/25499 - http://docs.info.apple.com/article.html?artnum=305571 - http://www.apple.com/support/downloads/xservelightsoutmanagementfirmwareupdate10.html
CVE ID: CVE-2007-2388 State: PUBLISHED Published: 2007-05-29T21:00:00 Last Updated: 2024-08-07T13:33:28.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to execute arbitrary code via a web page containing a user-defined class that accesses unsafe functions that can be leveraged to write to arbitrary memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/May/msg00005.html - http://www.vupen.com/english/advisories/2007/1974 - http://www.securitytracker.com/id?101813
ce/2007/May/msg00005.html - http://www.vupen.com/english/advisories/2007/1974 - http://www.securitytracker.com/id?1018136 - http://www.kb.cert.org/vuls/id/995836 - http://www.osvdb.org/35576 - http://secunia.com/advisories/25130 - http://www.securityfocus.com/bid/24221 - http://secunia.com/secunia_research/2007-52/advisory/
CVE ID: CVE-2007-2389 State: PUBLISHED Published: 2007-05-29T21:00:00 Last Updated: 2024-08-07T13:33:28.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers to read memory from a web browser via unknown vectors related to Java applets. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2007/May/msg00005.html - http://www.kb.cert.org/vuls/id/434748 - http://www.vupen.com/english/advisories/2007/1974 - http://www.securitytracker.com/id?1018136 - https://exchange.xforce.ibmcloud.com
upen.com/english/advisories/2007/1974 - http://www.securitytracker.com/id?1018136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34571 - http://secunia.com/advisories/25130 - http://www.osvdb.org/35575 - http://www.securityfocus.com/bid/24222
CVE ID: CVE-2007-2390 State: PUBLISHED Published: 2007-05-24T22:00:00 Last Updated: 2024-08-07T13:33:28.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34502 - http://www.vupen.com/english/advisories/2007/1939 - http://lists.apple.com/archives/security-announce/2007/May/msg000
- http://www.vupen.com/english/advisories/2007/1939 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.kb.cert.org/vuls/id/116100 - http://www.securityfocus.com/bid/24144 - http://www.securitytracker.com/id?1018119 - http://www.osvdb.org/35141
CVE ID: CVE-2007-2391 State: PUBLISHED Published: 2007-06-14T18:00:00 Last Updated: 2024-08-07T13:33:29.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitrary web script or HTML via a web page that includes a windows.setTimeout function that is activated after the user has moved from the current page. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34847 - http://www.vupen.com/english/advisories/2007/2192 - http://www.securityfocus.com/archive/1/471266/100/0/threaded - http://www.securityfocu
om/english/advisories/2007/2192 - http://www.securityfocus.com/archive/1/471266/100/0/threaded - http://www.securityfocus.com/bid/24457 - http://securitytracker.com/id?1018238 - http://www.securityfocus.com/archive/1/471255/100/0/threaded - http://osvdb.org/36605 - http://lists.apple.com/archives/security-announce/2007/Jun/msg00000.html
CVE ID: CVE-2007-2392 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:28.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via a crafted movie file that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - http://www.securitytracker.com/id?1018373 - http://www.kb.cert.org/vuls/id/582681 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35353 - http://www.vupen.com/english/advisories/2007/2510
A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35353 - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.info.apple.com/article.html?artnum=305947 - http://osvdb.org/36136 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
CVE ID: CVE-2007-2393 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - http://www.securitytracker.com/id?1018373 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.info.apple
ml - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.info.apple.com/article.html?artnum=305947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35359 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html - http://osvdb.org/36135
CVE ID: CVE-2007-2394 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:28.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35357 - http://www.securitytracker.com/id?1018373 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.
s/35357 - http://www.securitytracker.com/id?1018373 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://www.securityfocus.com/archive/1/473882/100/100/threaded - http://docs.info.apple.com/article.html?artnum=305947 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html - http://osvdb.org/36134 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=556
CVE ID: CVE-2007-2395 State: PUBLISHED Published: 2007-11-07T20:00:00 Last Updated: 2024-08-07T13:33:28.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description atom in a movie file, related to "memory corruption." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38550 - http://www.us-cert.gov/cas/techalerts/TA07-310A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/38266 - http://docs.info.apple.com/article.html?artnum=306896 - http://www.kb.cert.org/vuls/id/797875 - http://www.securityfocus.com/bid/26340
fo.apple.com/article.html?artnum=306896 - http://www.kb.cert.org/vuls/id/797875 - http://www.securityfocus.com/bid/26340 - http://lists.apple.com/archives/Security-announce/2007/Nov/msg00000.html - http://secunia.com/advisories/27523 - http://www.securitytracker.com/id?1018894 - http://www.vupen.com/english/advisories/2007/3723
CVE ID: CVE-2007-2396 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:28.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - http://www.securitytracker.com/id?1018373 - http://osvdb.org/36133 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.info.app
html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.info.apple.com/article.html?artnum=305947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35360 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html
CVE ID: CVE-2007-2397 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:28.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime for Java in Apple Quicktime before 7.2 does not properly check permissions, which allows remote attackers to disable security controls and execute arbitrary code via crafted Java applets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - http://www.securitytracker.com/id?1018373 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://osvdb.org/36132 - http://www.securityfocus.com/bid/24873 - http://docs.in
upen.com/english/advisories/2007/2510 - http://osvdb.org/36132 - http://www.securityfocus.com/bid/24873 - http://docs.info.apple.com/article.html?artnum=305947 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35358
CVE ID: CVE-2007-2398 State: PUBLISHED Published: 2007-06-21T10:00:00 Last Updated: 2024-08-07T13:33:28.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main window with arbitrary content by setting the location bar and using setTimeout() to create an event that modifies the window content, which could facilitate phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38862 - http://support.apple.com/kb/HT1467 - http://www.vupen.com/english/advisories/2007/2316 - http://www.vupen.com/english/advisories/2
port.apple.com/kb/HT1467 - http://www.vupen.com/english/advisories/2007/2316 - http://www.vupen.com/english/advisories/2008/0979/references - http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html - http://lists.apple.com/archives/security-announce/2008/Apr/msg00001.html - http://www.securitytracker.com/id?1018282 - http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0311.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35050 - http://www.securityfocus.com/archive/1/471452/100/0/threaded - http://www.securityfocus.com/bid/24484 - http://www.securityfocus.com/archive/1/471454/100/0/threaded
CVE ID: CVE-2007-2399 State: PUBLISHED Published: 2007-06-25T19:00:00 Last Updated: 2024-08-07T13:33:28.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2316 - http://docs.info.apple.com/article.html?artnum=306173 - http://lists.apple.com/archives/Security-announce/2007/Jun/msg00003.html - http://secunia.com/advisories/25786 - http://osvdb.org/
ts.apple.com/archives/Security-announce/2007/Jun/msg00003.html - http://secunia.com/advisories/25786 - http://osvdb.org/36130 - http://osvdb.org/36450 - http://www.securityfocus.com/bid/24597 - http://secunia.com/advisories/26287 - http://docs.info.apple.com/article.html?artnum=305759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35019 - http://www.vupen.com/english/advisories/2007/2731 - http://www.kb.cert.org/vuls/id/389868 - http://www.securitytracker.com/id?1018281 - http://www.vupen.com/english/advisories/2007/2296
CVE ID: CVE-2007-2400 State: PUBLISHED Published: 2007-06-25T19:00:00 Last Updated: 2024-08-07T13:33:28.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allows remote attackers to bypass the JavaScript security model and modify pages outside of the security domain and conduct cross-site scripting (XSS) attacks via vectors related to page updating and HTTP redirects. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36452 - http://www.vupen.com/english/advisories/2007/2316 - http://docs.info.apple.com/article.html?artnum=306173 - ht
g/36452 - http://www.vupen.com/english/advisories/2007/2316 - http://docs.info.apple.com/article.html?artnum=306173 - http://lists.apple.com/archives/Security-announce/2007/Jun/msg00004.html - http://www.securitytracker.com/id?1018282 - http://www.securityfocus.com/bid/24599 - http://secunia.com/advisories/26287 - http://www.kb.cert.org/vuls/id/289988 - http://www.vupen.com/english/advisories/2007/2731
CVE ID: CVE-2007-2401 State: PUBLISHED Published: 2007-06-25T19:00:00 Last Updated: 2024-08-07T13:33:28.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remote attackers to inject arbitrary HTTP headers via LF characters in an XMLHttpRequest request, which are not filtered when serializing headers via the setRequestHeader function. NOTE: this issue can be leveraged for cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2316 - http://docs.info.apple.com/article.html?artn
ontainer: References: - http://www.vupen.com/english/advisories/2007/2316 - http://docs.info.apple.com/article.html?artnum=306173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35017 - http://lists.apple.com/archives/Security-announce/2007/Jun/msg00003.html - http://secunia.com/advisories/25786 - http://www.westpoint.ltd.uk/advisories/wp-07-0002.txt - http://secunia.com/advisories/26287 - http://www.securityfocus.com/archive/1/472198/100/0/threaded - http://docs.info.apple.com/article.html?artnum=305759 - http://www.securityfocus.com/bid/24598 - http://www.vupen.com/english/advisories/2007/2731 - http://osvdb.org/36449 - http://www.securitytracker.com/id?1018281 - http://www.vupen.co
/english/advisories/2007/2731 - http://osvdb.org/36449 - http://www.securitytracker.com/id?1018281 - http://www.vupen.com/english/advisories/2007/2296 - http://www.kb.cert.org/vuls/id/845708
CVE ID: CVE-2007-2402 State: PUBLISHED Published: 2007-07-15T21:00:00 Last Updated: 2024-08-07T13:33:28.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensitive information (screen content) via crafted Java applets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26034 - http://www.securitytracker.com/id?1018373 - http://osvdb.org/36131 - http://www.us-cert.gov/cas/techalerts/TA07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.
07-193A.html - http://www.vupen.com/english/advisories/2007/2510 - http://www.securityfocus.com/bid/24873 - http://docs.info.apple.com/article.html?artnum=305947 - http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/35361
CVE ID: CVE-2007-2403 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:28.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id?1018491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35721 - http://docs.info.apple.com/article.html?art
om/id?1018491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35721 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2404 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:28.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in an unspecified context. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id
es/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://securitytracker.com/id?1018491 - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35723 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2405 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:28.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35734 - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2406 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:29.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to execute arbitrary code via a crafted Quartz Composer file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/35737 - http://www.vupen.com/english/advisories/2007/2732 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocu
urity-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2407 State: PUBLISHED Published: 2007-08-03T10:00:00 Last Updated: 2024-08-07T13:33:29.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping privileges, which allows remote authenticated users to use disk space in excess of quota. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35738 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=3061
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://secunia.com/advisories/26235
CVE ID: CVE-2007-2408 State: PUBLISHED Published: 2007-08-03T20:00:00 Last Updated: 2024-08-07T13:33:28.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attackers to execute Java applets via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2730 - http://www.securityfocus.com/bid/25157 - http://docs.info.apple.com/article.html?artnum=306174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/35714 - http://isc.sans.org/diary.html?storyid=3214