CVE-2009-1712

UNKNOWN

WebKit in Apple Safari before 4

Published Jun 10, 2009

Modified 1 years ago

Details

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.

References

ADVISORYhttp://lists.apple.com/archives/security-announce/2009/jun/msg00002.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html WEBhttp://osvdb.org/55022 ADVISORYhttp://secunia.com/advisories/35379 ADVISORYhttp://secunia.com/advisories/36790 ADVISORYhttp://secunia.com/advisories/37746 ADVISORYhttp://secunia.com/advisories/43068 WEBhttp://securitytracker.com/id?1022345 WEBhttp://support.apple.com/kb/HT3613 ADVISORYhttp://www.debian.org/security/2009/dsa-1950 WEBhttp://www.securityfocus.com/bid/35260 WEBhttp://www.securityfocus.com/bid/35350 ADVISORYhttp://www.ubuntu.com/usn/USN-836-1 ADVISORYhttp://www.ubuntu.com/usn/USN-857-1 WEBhttp://www.vupen.com/english/advisories/2009/1522 WEBhttp://www.vupen.com/english/advisories/2011/0212 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/51266 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2009-1712

CVSS Analysis

CVSS v2.0

9.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

CompleteC:C

Integrity

CompleteI:C

Availability

CompleteA:C

9.3/AV:N/AC:M/Au:N/C:C/I:C/A:C

Ecosystems

Timeline

PublishedJun 10, 2009

ModifiedAug 7, 2024

CVE-2009-1712 | Mondoo Vulnerability Intelligence