Published: 10/06/2009 Updated: 17/08/2017

CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9

VMScore: 231

Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N

WebKit in Apple Safari prior to 4.0 allows remote malicious users to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari 3.1.2
apple safari 0.8
apple safari 1.0
apple safari 2.0
apple safari 2.0.2
apple safari 3.0.3
apple safari 3.0.4
apple safari 1.2
apple safari 1.3
apple safari 3.2.3
apple safari
apple safari 3.0
apple safari 1.0.3
apple safari 1.1
apple safari 2.0.4
apple safari 3.2.1
apple safari 3.1.1
apple safari 3.1
apple safari 1.3.1
apple safari 1.3.2
apple safari 3.0.2
apple safari 0.9
apple safari 3.2
apple safari 3.0.1
apple safari 3.2.2

Several vulnerabilities have been discovered in WebKit, a Web content engine library for Gtk+ The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0945 Array index error in the insertItemBefore method in WebKit, allows remote attackers to execute arbitrary code via a document with a SVGPathList data structu ...

Debian Bug report logs - #534946 webkit: CVE-2009-1698 CVE-2009-1690 CVE-2009-1687 Package: webkit; Maintainer for webkit is (unknown); Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Sun, 28 Jun 2009 12:48:02 UTC Severity: grave Tags: lenny, patch, security Found in version 101-4 Fixed in versions 115-1, ...

Debian Bug report logs - #535793 webkit: deluge of security vulnerabilities Package: webkit; Maintainer for webkit is (unknown); Reported by: Michael S Gilbert <michaelsgilbert@gmailcom> Date: Sun, 5 Jul 2009 05:18:04 UTC Severity: grave Tags: fixed-upstream, security Found in version 101-4 Fixed in version 1121-1 ...

NVD-CWE-Other http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://www.securityfocus.com/bid/35260 http://www.vupen.com/english/advisories/2009/1522 http://support.apple.com/kb/HT3613 http://secunia.com/advisories/35379 http://osvdb.org/55014 http://www.securityfocus.com/bid/35340 http://www.debian.org/security/2009/dsa-1950 http://secunia.com/advisories/37746 http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2011/0212 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html https://exchange.xforce.ibmcloud.com/vulnerabilities/51263 https://nvd.nist.gov https://www.debian.org/security/./dsa-1950

CVE-2009-1710

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect