CVE-2007-0644

{"id": "CVE-2007-0644", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-02-01T00:28:00.000", "references": [{"url": "http://www.digitalmunition.com/MOAB-30-01-2007.html", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/32710", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22326", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in filenames that are not properly handled when calling the (1) NSLog and (2) NSBeginAlertSheet Apple AppKit functions."}, {"lang": "es", "value": "vulnerabilidad de cadena de formato en el Apple Safari 2.0.4 (419.3) permite a atacantes con la intervenci\u00f3n del usuario provocar una denegaci\u00f3n de servicio (ca\u00edda) mediante los requisitos de la cadena de formato en los nombres de fichero (filenames) que no son correctamente manejados que se llaman a las funciones (1) NSLog y (2) NSBeginAlertSheet Apple AppKit."}], "lastModified": "2008-09-05T21:18:26.333", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6D113B5-070D-4F91-AB5E-222D71C90EDF"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}