[email protected]CVE-2009-0153

HistoryMay 13, 2009 - 3:30 p.m.

CVE-2009-0153

2009-05-1315:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2009-0153

international components for unicode

icu 4.0

icu 3.x

cross-site scripting

xss

nvd

security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.6 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

JSON

International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.

Affected configurations

NVD

Node

applemac_os_xMatch10.5.0

applemac_os_xMatch10.5.1

applemac_os_xMatch10.5.2

applemac_os_xMatch10.5.3

applemac_os_xMatch10.5.4

applemac_os_xMatch10.5.5

applemac_os_xMatch10.5.6

applemac_os_x_serverMatch10.5.0

applemac_os_x_serverMatch10.5.1

applemac_os_x_serverMatch10.5.2

applemac_os_x_serverMatch10.5.3

applemac_os_x_serverMatch10.5.4

applemac_os_x_serverMatch10.5.5

applemac_os_x_serverMatch10.5.6

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.5.0
apple:mac_os_xapple mac os xeq10.5.1
apple:mac_os_xapple mac os xeq10.5.2
apple:mac_os_xapple mac os xeq10.5.3
apple:mac_os_xapple mac os xeq10.5.4
apple:mac_os_xapple mac os xeq10.5.5
apple:mac_os_xapple mac os xeq10.5.6
apple:mac_os_x_serverapple mac os x servereq10.5.0
apple:mac_os_x_serverapple mac os x servereq10.5.1
apple:mac_os_x_serverapple mac os x servereq10.5.2

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.5.0
apple:mac_os_x	apple mac os x	eq	10.5.1
apple:mac_os_x	apple mac os x	eq	10.5.2
apple:mac_os_x	apple mac os x	eq	10.5.3
apple:mac_os_x	apple mac os x	eq	10.5.4
apple:mac_os_x	apple mac os x	eq	10.5.5
apple:mac_os_x	apple mac os x	eq	10.5.6
apple:mac_os_x_server	apple mac os x server	eq	10.5.0
apple:mac_os_x_server	apple mac os x server	eq	10.5.1
apple:mac_os_x_server	apple mac os x server	eq	10.5.2