Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apple safari 3.2.3 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2

CVE-2009-3272

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions prior to 4.1.2, allows remote malicious users to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.
Apple Safari 3.2.3Apple Safari 4.0Apple Safari 4.0.0bApple Safari 4.0.2Apple Safari 4.0.3
5.8
CVSSv2

CVE-2009-2420

Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote malicious users to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related is...
Apple Safari 3.2.3
5
CVSSv2

CVE-2009-2421

The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a "high-bit character" in a URL fragm...
Apple Safari 3.2.3
4.3
CVSSv2

CVE-2009-1682

Apple Safari prior to 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote malicious users to trick a user into accepting an invalid certificate.
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
4.3
CVSSv2

CVE-2009-1689

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to inject arbitrary web script or HTML via vectors involving submissi...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
4.3
CVSSv2

CVE-2009-1685

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to inject arbitrary web script or HTML by overwriting the document.im...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
9.3
CVSSv2

CVE-2009-1686

WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows re...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
4.3
CVSSv2

CVE-2009-1688

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to inject arbitrary web script or HTML via vectors related to determi...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
4.3
CVSSv2

CVE-2009-1691

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to inject arbitrary web script or HTML via vectors related to insuffi...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
5
CVSSv2

CVE-2009-1696

WebKit in Apple Safari prior to 4.0, iPhone OS 1.0 up to and including 2.2.1, and iPhone OS for iPod touch 1.1 up to and including 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.2Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2.0Apple Safari 2.0.2
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
unprivilegedprivilege escalationCVE-2024-57040morningCVE-2025-24801CVE-2025-24813CVE-2025-29930CVE-2024-10442smartosCVE-2025-0694cryptolibmbconnect24local users
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook