CVE-2007-0979

Published: Feb 16, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in LifeType before 1.1.6, and 1.2 before 1.2-beta2, allows remote attackers to obtain sensitive information (file contents) via a "crafted URL."

Affected (2)

Products: Lifetype: Lifetype

Lifetype

1 product

Lifetype

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Lifetype Lifetype	Up to 1.1.5
Lifetype Lifetype	Up to 1.2_beta_1

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://osvdb.org/33210

Source: cve@mitre.org

http://secunia.com/advisories/24170

Source: cve@mitre.org

http://www.lifetype.net/blog/lifetype-development-journal/releases

Source: cve@mitre.org

http://www.securityfocus.com/bid/22572

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0616

Source: cve@mitre.org

http://osvdb.org/33210