VULNERABILITY INTELLIGENCE
CVE-2007-2399
CVSS score9.3 HIGH
EPSS probability7.29%
CISA KEVNot currently listed
Published2007-06-25
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption.
Primary references
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — US Government Resource
- cve@mitre.org
- cve@mitre.org — Patch
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory