CVE-2007-2399

No fix known EPSS 7%

WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which allows remote attackers to execute arbitrary code via unspecified frame sets that trigger memory corruption.

Published 2007-06-25 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server