CVE-2007-4824 Cross-site scripting in n/a

Medium 6.8 Published 11 Sep 2007 Updated 7 Aug 2024

Cross-application scripting vulnerabilities in Google Picasa allow attackers to execute scripts in the context of other applications.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: None listed

What is CVE-2007-4824?

CVE-2007-4824 is a medium-severity cross-site scripting vulnerability in n/a, published on 11 Sep 2007.

Official description

Multiple cross-application scripting (XAS) vulnerabilities in Google Picasa have unspecified attack vectors and impact. NOTE: this information is based upon a vague pre-advisory.

Which versions are affected by CVE-2007-4824?

It affects 1 product.

Products include Google Picasa.

How do I fix CVE-2007-4824?

No fix has been published for CVE-2007-4824 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2007-4824 being exploited?

There is no known exploitation of CVE-2007-4824 in the wild and no public exploit code.

Sources

Also known as GHSA-gpcw-f7pf-95mq.