Lucene search

K
cve[email protected]CVE-2009-1703
HistoryJun 10, 2009 - 6:00 p.m.

CVE-2009-1703

2009-06-1018:00:00
CWE-200
web.nvd.nist.gov
28
cve-2009-1703
webkit
apple safari
security vulnerability
file url
remote attack

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.

Affected configurations

NVD
Node
applesafariRange4.0_betamac
OR
applesafariMatch0.8mac
OR
applesafariMatch0.9mac
OR
applesafariMatch1.0mac
OR
applesafariMatch1.0.3mac
OR
applesafariMatch1.1mac
OR
applesafariMatch1.2mac
OR
applesafariMatch1.3mac
OR
applesafariMatch1.3.1mac
OR
applesafariMatch1.3.2mac
OR
applesafariMatch2.0mac
OR
applesafariMatch2.0.2mac
OR
applesafariMatch2.0.4mac
OR
applesafariMatch3.0mac
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.3mac
OR
applesafariMatch3.0.4mac
OR
applesafariMatch3.1mac
OR
applesafariMatch3.1.1mac
OR
applesafariMatch3.1.2mac
OR
applesafariMatch3.2.1mac
OR
applesafariMatch3.2.3mac
Node
applesafariRange3.2.3windows
OR
applesafariMatch3.0windows
OR
applesafariMatch3.0.1windows
OR
applesafariMatch3.0.2windows
OR
applesafariMatch3.0.3windows
OR
applesafariMatch3.0.4windows
OR
applesafariMatch3.1windows
OR
applesafariMatch3.1.1windows
OR
applesafariMatch3.1.2windows
OR
applesafariMatch3.2-windows
OR
applesafariMatch3.2.1windows
OR
applesafariMatch3.2.2windows

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%