NVD

Id
55864  
Name
CVE-2007-3715  
Description
Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-11  
Modified Date
2011-07-28  
Seq
2007-3715  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284013 55864 CVE-2007-3715 102992  View
284014 55864 CVE-2007-3715 200054  View
284015 55864 CVE-2007-3715 http://www.isecpartners.com/advisories/2007-04-dsig.txt  View
284016 55864 CVE-2007-3715 http://www.isecpartners.com/files/XMLDSIG_Command_Injection.pdf  View
284017 55864 CVE-2007-3715 20070712 Command Injection in XML Digital Signatures  View
284018 55864 CVE-2007-3715 20070712 Whitepaper: Command Injection in XML Digital Signatures and Encryption  View
284019 55864 CVE-2007-3715 24850  View
284020 55864 CVE-2007-3715 ADV-2007-2493  View
284021 55864 CVE-2007-3715 ADV-2007-2785  View
284022 55864 CVE-2007-3715 sunjava-xsltstylesheets-code-execution(35335)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51892 JVNDB-2007-000555 Sun Java System Application Server および Web Server における Java メソッドを実行される脆弱性 Sun Java System Application Server および Web Server には、XML 署名に含まれる XSLT の Transforms 要素で指定された XSLT スタイルシートを適切に処理しないため、不正に Java メソッドを実行される脆弱性があります。 CVE-2007-3715 27070 CVE-2007-3715 55864 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000555.html 2007-07-10 2007-08-06 View