CVE-2007-0148
MEDIUM 6.8EPSS 6.4%
Format string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the Javascript alert function.
- CVSS v2.0 NVD
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 6.44% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2007-01-09
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://projects.info-pull.com/moab/MOAB-07-01-2007.html
- http://secunia.com/advisories/23624
- http://www.omnigroup.com/applications/omniweb/releasenotes
- http://www.securityfocus.com/bid/21911