Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

apple safari 2.0.3 417.9.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-3384
Multiple unspecified vulnerabilities in WebKit in Apple Safari prior to 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1.0Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 1.3Apple Safari 1.3.0Apple Safari 1.3.1
NA
CVE-2009-2841
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari prior to 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which al...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1.0Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 1.3Apple Safari 1.3.0Apple Safari 1.3.1
NA
CVE-2009-2804
Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari prior to 4.0.4 on Windows, allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a he...
Apple Mac Os X 10.5.8Apple Mac Os X Server 10.4.11Apple Mac Os X Server 10.5.8Apple Mac Os X 10.4.11Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1.0Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4
NA
CVE-2009-2200
WebKit in Apple Safari prior to 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote malicious users to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document.
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.1.0Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 1.3Apple Safari 1.3.0
NA
CVE-2009-2195
Buffer overflow in WebKit in Apple Safari prior to 4.0.3 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.0Apple Safari 1.0.0b1Apple Safari 1.0.0b2Apple Safari 1.0.1Apple Safari 1.0.2Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.1.0Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.2.0Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 1.3Apple Safari 1.3.0
NA
CVE-2009-2062
Apple Safari prior to 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an...
Apple Safari 3.0.4bApple Safari 1.3.0Apple Safari 1.0.3Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 2Apple Safari 1.1.1Apple Safari 3.0.4Apple Safari 1.2.2Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 1.0.2Apple Safari 3.0.0Apple Safari 3.0.2Apple Safari 1.0Apple Safari 2.0.4 419.3Apple Safari 3.0.3bApple Safari 3.1.1Apple Safari 1.3Apple Safari 3.1Apple Safari 1.2.5
NA
CVE-2009-2066
Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle malicious users to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a s...
Apple Safari 3.0.4bApple Safari 1.3.0Apple Safari 1.0.3Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 2Apple Safari 1.1.1Apple Safari 3.0.4Apple Safari 1.2.2Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 1.0.2Apple Safari 3.0.0Apple Safari 3.0.2Apple Safari 1.0Apple Safari 2.0.4 419.3Apple Safari 3.0.3bApple Safari 3.1.1Apple Safari 1.3Apple Safari 3.1Apple Safari 1.2.5
NA
CVE-2009-2072
Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle malicious users to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request s...
Apple Safari 3.0.4bApple Safari 1.3.0Apple Safari 1.0.3Apple Safari 2.0.3Apple Safari 1.3.2Apple Safari 2Apple Safari 1.1.1Apple Safari 3.0.4Apple Safari 1.2.2Apple Safari 3.0.1Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 1.0.2Apple Safari 3.0.0Apple Safari 3.0.2Apple Safari 1.0Apple Safari 2.0.4 419.3Apple Safari 3.0.3bApple Safari 3.1.1Apple Safari 1.3Apple Safari 3.1Apple Safari 1.2.5
NA
CVE-2008-4216
The plug-in interface in WebKit in Apple Safari prior to 3.2 does not prevent plug-ins from accessing local URLs, which allows remote malicious users to obtain sensitive information via vectors that "launch local files."
Apple Safari 1.3.2Apple Safari 2Apple Safari 1.1.1Apple Safari 3.0.4Apple Safari 1.2.2Apple Safari 2.0.1Apple Safari 3.0.1Apple Safari 2.0.3Apple Safari 1.0.3Apple Safari 2.0.2Apple Safari 3.0.2Apple Safari 1.0Apple Safari 2.0.4 419.3Apple Safari 3.1.1Apple Safari 1.3Apple Safari 3.0.3Apple Safari 3.1Apple Safari 1.2.5Apple Safari 3.0Apple Safari 2.0Apple Safari 1.2.4Apple Safari 1.2.1
NA
CVE-2008-3623
Heap-based buffer overflow in CoreGraphics in Apple Safari prior to 3.2 on Windows, in iPhone OS 1.0 up to and including 2.2.1, and in iPhone OS for iPod touch 1.1 up to and including 2.2.1 allows remote malicious users to execute arbitrary code or cause a denial of service (appl...
Apple SafariApple Safari 0.8Apple Safari 0.9Apple Safari 1.0Apple Safari 1.0.3Apple Safari 1.1Apple Safari 1.1.1Apple Safari 1.2Apple Safari 1.2.1Apple Safari 1.2.2Apple Safari 1.2.3Apple Safari 1.2.4Apple Safari 1.2.5Apple Safari 1.3Apple Safari 1.3.1Apple Safari 1.3.2Apple Safari 2Apple Safari 2.0Apple Safari 2.0.1Apple Safari 2.0.2Apple Safari 2.0.3Apple Safari 2.0.3 417.9.3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692CVE-2012-1823memory leakCVE-2024-0627CVE-2024-31402privilege escalationCVE-2024-36418remote code executionCVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook