CVE-2007-0705: High severity Fenrir Portable Sleipnir vulnerability
Published Feb 4, 2007
·Updated
Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote attackers to bypass Web content zone restrictions via certain script contained in RSS data. NOTE: some of these details are obtained from third party information.
Affected Software
2 affected components
Fenrir Portable Sleipnir<=2.45
Fenrir Sleipnir<=2.49
Event History
Feb 4, 2007
CVE Published
12:28 AM
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
Which installations are affected?
Sleipnir 2.49 and earlier and Portable Sleipnir 2.45 and earlier are affected.
2
What does an attacker need to exploit this issue?
An attacker can exploit the issue remotely by using certain script contained in RSS data. No authentication is required according to the supplied vector.
3
What security impact can exploitation have?
Successful exploitation bypasses Web content zone restrictions and can affect confidentiality, integrity, and availability.