Cross-Zone Scripting Vulnerability in Sleipnir Browser by Fenrir
CVE-2007-0705

Currently unrated

Key Information:

Vendor: Fenrir
Status: Portable Sleipnir; Sleipnir
Vendor: CVE Published:; 4 February 2007

What is CVE-2007-0705?

A cross-zone scripting vulnerability exists in Fenrir's Sleipnir browser versions 2.49 and earlier, as well as Portable Sleipnir versions 2.45 and earlier. This vulnerability allows remote attackers to exploit certain scripts embedded in RSS data to bypass Web content zone restrictions, potentially compromising user security and data integrity. Users are advised to update their browser versions to mitigate the risk associated with this vulnerability.

References

http://www.vupen.com/english/advisories/2007/0364

vdb-entryx_refsource_VUPEN

http://www.fenrir.co.jp/press/20070126_2.html

x_refsource_MISC

http://www.ipa.go.jp/security/vuln/documents/2006/JVN_937...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 4, 2007
Vulnerability Reserved
Feb 3, 2007

CVE-2007-0705 Data

JSON