CVE-2009-1710

Опубликовано: 10 июн. 2009

Источник: nvd

CVSS2: 2.6

EPSS Низкий

Описание

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property.

Ссылки

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/55014
http://secunia.com/advisories/35379
Vendor Advisory
http://secunia.com/advisories/37746
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory
http://www.debian.org/security/2009/dsa-1950
http://www.securityfocus.com/bid/35260
Exploit
Patch
http://www.securityfocus.com/bid/35340
http://www.vupen.com/english/advisories/2009/1522
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0212
https://exchange.xforce.ibmcloud.com/vulnerabilities/51263
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/55014
http://secunia.com/advisories/35379
Vendor Advisory
http://secunia.com/advisories/37746
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:-:mac:*:*:*:*:*

Версия до 4.0_beta (включая)

cpe:2.3:a:apple:safari:0.8:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:0.9:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.0:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.0.3:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.1:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3.1:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0.4:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.3:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.4:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.1:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.1:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.3:-:mac:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:*

Версия до 3.2.3 (включая)

cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.1:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.2:-:windows:*:*:*:*:*

EPSS

Процентиль: 73%

0.00741

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2009-1710

ubuntu

больше 16 лет назад

CVE-2009-1710

debian

больше 16 лет назад

WebKit in Apple Safari before 4.0 allows remote attackers to spoof the ...

GHSA-3qpx-8jpj-43gg

github

почти 4 года назад

EPSS

Процентиль: 73%

0.00741

Низкий

2.6 Low

CVSS2

Дефекты

NVD-CWE-Other