CVE-2007-3944

{"id": "CVE-2007-3944", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-07-23T16:30:00.000", "references": [{"url": "http://docs.info.apple.com/article.html?artnum=306173", "source": "cve@mitre.org"}, {"url": "http://docs.info.apple.com/article.html?artnum=306174", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26287", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.nytimes.com/2007/07/23/technology/23iphone.html?_r=1&adxnnl=1&adxnnlx=1185163364-1OTsRJvbylLamj17FY2wnw&oref=slogin", "source": "cve@mitre.org"}, {"url": "http://www.securityevaluators.com/iphone/", "source": "cve@mitre.org"}, {"url": "http://www.securityevaluators.com/iphone/exploitingiphone.pdf", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25002", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1018439", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2730", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/2731", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35577", "source": "cve@mitre.org"}, {"url": "http://docs.info.apple.com/article.html?artnum=306173", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://docs.info.apple.com/article.html?artnum=306174", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26287", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.nytimes.com/2007/07/23/technology/23iphone.html?_r=1&adxnnl=1&adxnnlx=1185163364-1OTsRJvbylLamj17FY2wnw&oref=slogin", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityevaluators.com/iphone/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityevaluators.com/iphone/exploitingiphone.pdf", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25002", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1018439", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2730", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/2731", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35577", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Multiple heap-based buffer overflows in the Perl Compatible Regular Expressions (PCRE) library in the JavaScript engine in WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, allow remote attackers to execute arbitrary code via certain JavaScript regular expressions. NOTE: this issue was originally reported only for MobileSafari on the iPhone.  NOTE: it is not clear whether this stems from an issue in the original distribution of PCRE, which might already have a separate CVE identifier."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en la regi\u00f3n heap de la memoria en la biblioteca de Perl Compatible Regular Expressions (PCRE) en el motor de JavaScript en WebKit en Apple Safari versi\u00f3n 3 Beta anterior al Update 3.0.3 y iPhone versiones anteriores a 1.0.1, permiten a atacantes remotos ejecutar c\u00f3digo arbitrario por medio de cierto expresiones regulares de JavaScript. NOTA: este problema se report\u00f3 originalmente solo para MobileSafari en el iPhone. NOTA: no est\u00e1 claro si esto es debido a un problema en la distribuci\u00f3n original de PCRE, que ya podr\u00eda tener un identificador CVE por separado."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A33F900-D405-40A8-A0A5-3C80320FF6E9"}, {"criteria": "cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "461EFB63-7933-488C-BB4E-7C913364F5A9"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1C626E5-6835-41C8-91A3-F4FB0A36DBFD", "versionEndIncluding": "1.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}