Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2009-2816

Published: 13/11/2009 Updated: 08/11/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Apple

Vulnerability Summary

The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari prior to 4.0.4 and Google Chrome prior to 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote malicious users to conduct cross-site request forgery (CSRF) attacks via a crafted web page.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari

google chrome

apple iphone os

opensuse opensuse 11.2

opensuse opensuse 11.3

fedoraproject fedora 11

fedoraproject fedora 12

Vendor Advisories

Debian CVElist Bug Report Logs: webkit: multiple security issues
Debian Bug report logs - #559759 webkit: multiple security issues Package: webkit; Maintainer for webkit is (unknown); Reported by: Michael Gilbert <michaelsgilbert@gmailcom> Date: Sun, 6 Dec 2009 22:36:01 UTC Severity: serious Tags: security Found in version 101-4 Done: Michael Gilbert <michaelsgilbert@gmail ...

References

CWE-352http://support.apple.com/kb/HT3949http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=525789https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.htmlhttp://secunia.com/advisories/37346http://www.vupen.com/english/advisories/2009/3217http://www.securityfocus.com/bid/36997http://secunia.com/advisories/37358http://www.vupen.com/english/advisories/2009/3233http://secunia.com/advisories/37397http://osvdb.org/59940http://osvdb.org/59967http://www.securitytracker.com/id?1023165http://secunia.com/advisories/37393http://support.apple.com/kb/HT4225http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.htmlhttp://secunia.com/advisories/43068http://www.vupen.com/english/advisories/2011/0212http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/54239https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6516https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559759https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook