CVE-2009-1713

Опубликовано: 10 июн. 2009

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.

Ссылки

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/54975
http://secunia.com/advisories/35379
Vendor Advisory
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory
http://www.securityfocus.com/bid/35260
Exploit
http://www.ubuntu.com/usn/USN-857-1
http://www.vupen.com/english/advisories/2009/1522
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0212
https://exchange.xforce.ibmcloud.com/vulnerabilities/51267
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
Patch
Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://osvdb.org/54975
http://secunia.com/advisories/35379
Vendor Advisory
http://secunia.com/advisories/43068
http://support.apple.com/kb/HT3613
Patch
Vendor Advisory
http://www.securityfocus.com/bid/35260
Exploit
http://www.ubuntu.com/usn/USN-857-1
http://www.vupen.com/english/advisories/2009/1522
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:safari:*:*:mac:*:*:*:*:*

Версия до 4.0_beta (включая)

cpe:2.3:a:apple:safari:0.8:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:0.9:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.0:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.0.3:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:1.3.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:2.0.4:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.2:-:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.3:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.4:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.2:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.1:*:mac:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.3:*:mac:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:apple:safari:*:*:windows:*:*:*:*:*

Версия до 3.2.3 (включая)

cpe:2.3:a:apple:safari:3.0:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.2:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.3:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.0.4:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.1.2:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.1:*:windows:*:*:*:*:*

cpe:2.3:a:apple:safari:3.2.2:*:windows:*:*:*:*:*

EPSS

Процентиль: 75%

0.00861

Низкий

7.1 High

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2009-1713

ubuntu

больше 16 лет назад

CVE-2009-1713

debian

больше 16 лет назад

The XSLT functionality in WebKit in Apple Safari before 4.0 does not p ...

GHSA-2x3g-6456-c8h3

github

почти 4 года назад

BDU:2015-04057

fstec

около 11 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

BDU:2015-04056

fstec

около 11 лет назад

EPSS

Процентиль: 75%

0.00861

Низкий

7.1 High

CVSS2

Дефекты

CWE-200