CVE-2009-1713

Published: 10/06/2009 Updated: 17/08/2017

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N

The XSLT functionality in WebKit in Apple Safari prior to 4.0 does not properly implement the document function, which allows remote malicious users to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari 1.1
apple safari 1.3.1
apple safari 3.2.3
apple safari 2.0.2
apple safari 3.1
apple safari 3.1.2
apple safari 3.0
apple safari 0.8
apple safari 2.0
apple safari 3.0.4
apple safari 0.9
apple safari 3.0.3
apple safari 1.3.2
apple safari 1.2
apple safari
apple safari 3.2.1
apple safari 3.0.2
apple safari 2.0.4
apple safari 3.1.1
apple safari 1.0.3
apple safari 1.0
apple safari 1.3
apple safari 3.2
apple safari 3.0.1
apple safari 3.2.2

It was discovered that QtWebKit did not properly handle certain SVGPathList data structures If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program (CVE-2009-0945) ...

Debian Bug report logs - #545793 CVE-2009-2700: QSslCertificate incorrect verification of SSL certificate with NUL in subjectAltName Package: qt4-x11; Maintainer for qt4-x11 is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Wed, 9 Sep 2009 08:00 ...

Debian Bug report logs - #535793 webkit: deluge of security vulnerabilities Package: webkit; Maintainer for webkit is (unknown); Reported by: Michael S Gilbert <michaelsgilbert@gmailcom> Date: Sun, 5 Jul 2009 05:18:04 UTC Severity: grave Tags: fixed-upstream, security Found in version 101-4 Fixed in version 1121-1 ...

CWE-200 http://www.vupen.com/english/advisories/2009/1522 http://www.securityfocus.com/bid/35260 http://support.apple.com/kb/HT3613 http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://secunia.com/advisories/35379 http://osvdb.org/54975 http://www.ubuntu.com/usn/USN-857-1 http://secunia.com/advisories/43068 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html http://www.vupen.com/english/advisories/2011/0212 https://exchange.xforce.ibmcloud.com/vulnerabilities/51267 https://nvd.nist.gov https://usn.ubuntu.com/857-1/

CVE-2009-1713

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect