7.5

CVE-2007-0706

Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for unDonut before 1.29 allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fenrir ≫ Darksky Rss Bar Edition internet_explorer Version <= 1.28_release3
Fenrir ≫ Darksky Rss Bar Edition sleipnir Version <= 1.28_release3
Fenrir ≫ Darksky Rss Bar Edition undonut Version <= 1.28_release3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.43% 0.695
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://jvn.jp/jp/JVN%2393700808/index.html
http://www.fenrir.co.jp/press/20070126_2.html
http://www.vupen.com/english/advisories/2007/0365