Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-0342

CWE-399CWE-476 — NULL Pointer Dereference4 documents4 sources
Severity
7.5HIGH
EPSS
5.2%
top 10.05%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
4
Apple MAC OS XApple SafariApple Webkit+1 more
Timeline
PublishedJan 18
Latest updateMay 1

Description

WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶NVDapple/webkitbuild_18794
▶NVDapple/safari2.0.4_419.3
▶NVDapple/mac_os_x10.4.8

🔴Vulnerability Details

2
GHSA
GHSA-c398-43hf-w2rg: WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element wit↗2022-05-01
▶
CVEList
CVE-2007-0342: WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element wit↗2007-01-18
▶

💥Exploits & PoCs

1
Exploit-DB
Apple WebKit build 18794 - WebCore Remote Denial of Service↗2007-01-15
▶
CVE-2007-0342 (HIGH CVSS 7.5) | WebCore in Apple WebKit build 18794 | cvebase.io