CVE-2007-2399

N/A Unknown

Published: June 25, 2007 Modified: April 23, 2026

Description

WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://docs.info.apple.com/article.html?artnum=305759

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=306173

Source: cve@mitre.org

http://lists.apple.com/archives/Security-announce/2007/Jun/msg00003.html

Source: cve@mitre.org

http://osvdb.org/36130

Source: cve@mitre.org

http://osvdb.org/36450

Source: cve@mitre.org

http://secunia.com/advisories/25786

Source: cve@mitre.org

Patch Vendor Advisory

http://secunia.com/advisories/26287

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/389868

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/bid/24597

Source: cve@mitre.org

http://www.securitytracker.com/id?1018281

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2007/2296

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/2316

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/2731

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/35019

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=305759