Google Security Advisories · December 2007 — Google Security Advisories
3 advisories 3 CVEs

GCVE / Google Cloud / Chrome / Android / Project Zero / OSS for 2007-12. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

CVE-2007-6212

GoogleEPSS <= 49%HIGH2007-12-04

Directory traversal vulnerability in region.php in KML share 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the layer parameter.

CVEs:CVE-2007-6212

Affected products

ProductStatusVendorPackageEcosystem
kml affected google
Upstream advisory

CVE-2007-6536

GoogleEPSS <= 49%MEDIUM2007-12-27

The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the (1) "Downloaded from" and (2) "Privacy considerations" sections without verifying domain names, which makes it easier for remote attackers to spoof d...

CVEs:CVE-2007-6536

Affected products

ProductStatusVendorPackageEcosystem
toolbar affected google
Upstream advisory

CVE-2007-6452

GoogleEPSS <= 49%CRITICAL2007-12-20

Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting (XSS).

CVEs:CVE-2007-6452

Affected products

ProductStatusVendorPackageEcosystem
web_toolkit affected google
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.