Omnigroup: >> Omniweb >> 5.1 Security Vulnerabilities
Integer overflow in OmniWeb allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25.
CVSS Score
5.0
EPSS Score
0.002
Published
2010-03-24
AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.
CVSS Score
5.0
EPSS Score
0.004
Published
2005-05-02