NVD

Id
58635  
Name
CVE-2007-6640  
Description
Creammonkey 0.9 through 1.1 and GreaseKit 1.2 through 1.3 does not properly prevent access to dangerous functions, which allows remote attackers to read the configuration, modify the configuration, or send an HTTP request via the (1) GM_addStyle, (2) GM_log, (3) GM_openInTab, (4) GM_setValue, (5) GM_getValue, or (6) GM_xmlhttpRequest function within a web page on which a userscript is configured.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2008-01-03  
Modified Date
2008-11-15  
Seq
2007-6640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300840 58635 CVE-2007-6640 http://8-p.info/greasekit/vuln/20071226-en.html  View
300841 58635 CVE-2007-6640 greasekit-creammonkey-gm-security-bypass(39272)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52160 JVNDB-2007-000824 GreaseKit および Creammonkey における許可されていない関数が実行される脆弱性 GreaseKit および Creammonkey には、許可されていないユーザスクリプト専用の関数が実行される脆弱性が存在します。 CVE-2007-6640 29995 CVE-2007-6640 58635 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000824.html 2007-12-26 2007-12-26 View