CVE-2007-2399

Apple Mac OS X WebKit - Frame Set Memory Corruption Code Execution

Title source: manual
STIX 2.1

Description

WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption.

References (14)

Core 14
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2316
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25786
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26287
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35019
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=306173
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/Security-announce/2007/Jun/msg00003.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36130
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/36450
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24597
Vendor Advisory x_refsource_confirm
http://docs.info.apple.com/article.html?artnum=305759
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2731
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/389868
Patch vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018281
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2296

Scores

EPSS 0.0729
EPSS Percentile 93.7%

Details

Status published
Products (4)
apple/mac_os_x 10.3.9
apple/mac_os_x 10.4.9
apple/mac_os_x_server 10.3.9
apple/mac_os_x_server 10.4.9
Published Jun 25, 2007
Tracked Since Feb 18, 2026