Cross-Zone Scripting Vulnerability in Darksky RSS Bar for Internet Explorer
CVE-2007-0706

Currently unrated

Key Information:

Vendor: Fenrir
Status: Darksky Rss Bar
Vendor: CVE Published:; 4 February 2007

What is CVE-2007-0706?

A cross-zone scripting vulnerability exists in the Darksky RSS bar utilized by Internet Explorer and other browsers, prior to version 1.29. This flaw allows remote attackers to bypass web content zone restrictions through specially crafted scripts within the RSS data. The exploitation of this vulnerability could lead to unauthorized access and manipulation of a user's browser environment, highlighting the importance of maintaining updated software and security protocols.

References

http://www.vupen.com/english/advisories/2007/0365

vdb-entryx_refsource_VUPEN

http://www.fenrir.co.jp/press/20070126_2.html

x_refsource_MISC

http://jvn.jp/jp/JVN%2393700808/index.html

third-party-advisoryx_refsource_JVN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 4, 2007
Vulnerability Reserved
Feb 3, 2007

CVE-2007-0706 Data

JSON

Fenrir

What is CVE-2007-0706?

References

Timeline