NVD

Id
55340  
Name
CVE-2007-3186  
Description
Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-12  
Modified Date
2012-10-30  
Seq
2007-3186  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281249 55340 CVE-2007-3186 http://larholm.com/2007/06/12/safari-for-windows-0day-exploit-in-2-hours  View
281250 55340 CVE-2007-3186 http://larholm.com/2007/06/14/safari-301-released/  View
281251 55340 CVE-2007-3186 APPLE-SA-2007-06-14  View
281252 55340 CVE-2007-3186 20070612 Safari for Windows, 0day URL protocol handler command injection  View
281253 55340 CVE-2007-3186 20070612 Safari for Windows, 0day URL protocol handler command injection  View
281254 55340 CVE-2007-3186 24434  View
281255 55340 CVE-2007-3186 1018224  View
281256 55340 CVE-2007-3186 ADV-2007-2192  View
281257 55340 CVE-2007-3186 safari-urlprotocol-command-execution(34824)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53487 JVNDB-2007-002179 Apple Safari における任意のコマンドを実行される脆弱性 Wondows 用の Apple Safari には、任意のコマンドを実行される脆弱性が存在します。 CVE-2007-3186 26541 CVE-2007-3186 55340 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002179.html 2007-06-12 2012-06-26 View