CVE-2009-1684 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2009-1684

Modified

More Info Official Page

Source-cve@mitre.org

Published At-10 Jun, 2009 | 14:30

Updated At-17 Feb, 2011 | 06:43

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

>>safari>>Versions up to 4.0_beta(inclusive)

cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*

>>safari>>0.8

cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*

>>safari>>0.9

cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*

>>safari>>1.0

cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*

>>safari>>1.0.3

cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*

>>safari>>1.1

cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*

>>safari>>1.2

cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*

>>safari>>1.3

cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*

>>safari>>1.3.1

cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*

>>safari>>1.3.2

cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*

>>safari>>2.0

cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*

>>safari>>2.0.2

cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*

>>safari>>2.0.4

cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*

>>safari>>3.0

cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*

>>safari>>3.0.2

cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*

>>safari>>3.0.3

cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*

>>safari>>3.0.4

cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*

>>safari>>3.1

cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*

>>safari>>3.1.1

cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*

>>safari>>3.1.2

cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*

>>safari>>3.2.1

cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*

>>safari>>3.2.3

cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*

>>safari>>Versions up to 3.2.3(inclusive)

cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*

>>safari>>3.0

cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*

>>safari>>3.0.1

cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*

>>safari>>3.0.2

cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*

>>safari>>3.0.3

cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*

>>safari>>3.0.4

cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*

>>safari>>3.1

cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*

>>safari>>3.1.1

cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*

>>safari>>3.1.2

cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*

>>safari>>3.2

cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*

>>safari>>3.2.1

cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*

>>safari>>3.2.2

cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html	cve@mitre.org	Patch Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	cve@mitre.org	N/A
http://osvdb.org/54987	cve@mitre.org	N/A
http://secunia.com/advisories/35379	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/37746	cve@mitre.org	N/A
http://secunia.com/advisories/43068	cve@mitre.org	N/A
http://securitytracker.com/id?1022344	cve@mitre.org	Patch
http://support.apple.com/kb/HT3613	cve@mitre.org	Patch Vendor Advisory
http://support.apple.com/kb/HT3639	cve@mitre.org	N/A
http://www.debian.org/security/2009/dsa-1950	cve@mitre.org	N/A
http://www.securityfocus.com/bid/35260	cve@mitre.org	Exploit
http://www.vupen.com/english/advisories/2009/1522	cve@mitre.org	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2009/1621	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2011/0212	cve@mitre.org	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://osvdb.org/54987

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/35379

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/37746

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/43068

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://securitytracker.com/id?1022344

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://support.apple.com/kb/HT3613

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3639

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2009/dsa-1950

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/35260

Source: cve@mitre.org

Resource:

Exploit

Hyperlink: http://www.vupen.com/english/advisories/2009/1522

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.vupen.com/english/advisories/2009/1621

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

Resource: N/A