Lucene search
HistoryJun 10, 2009 - 6:00 p.m.
CVE-2009-1704
cfnetwork
apple safari
cve-2009-1704
image files
html
javascript
remote code execution
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.025 Low
EPSS
Percentile
90.2%
CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file.
Affected configurations
Node
applesafariRange≤4.0_betamac
ORapplesafariMatch0.8mac
ORapplesafariMatch0.9mac
ORapplesafariMatch1.0mac
ORapplesafariMatch1.0.3mac
ORapplesafariMatch1.1mac
ORapplesafariMatch1.2mac
ORapplesafariMatch1.3mac
ORapplesafariMatch1.3.1mac
ORapplesafariMatch1.3.2mac
ORapplesafariMatch2.0mac
ORapplesafariMatch2.0.2mac
ORapplesafariMatch2.0.4mac
ORapplesafariMatch3.0mac
ORapplesafariMatch3.0.2-mac
ORapplesafariMatch3.0.3mac
ORapplesafariMatch3.0.4mac
ORapplesafariMatch3.1mac
ORapplesafariMatch3.1.1mac
ORapplesafariMatch3.1.2mac
ORapplesafariMatch3.2.1mac
ORapplesafariMatch3.2.3mac
Node
applesafariRange≤3.2.3windows
ORapplesafariMatch3.0windows
ORapplesafariMatch3.0.1windows
ORapplesafariMatch3.0.2windows
ORapplesafariMatch3.0.3windows
ORapplesafariMatch3.0.4windows
ORapplesafariMatch3.1windows
ORapplesafariMatch3.1.1windows
ORapplesafariMatch3.1.2windows
ORapplesafariMatch3.2-windows
ORapplesafariMatch3.2.1windows
ORapplesafariMatch3.2.2windows
Related
nvd
nvd
CVE-2009-1704
2009-06-10 18:00:00
prion
prion
Code injection
2009-06-10 18:00:00
cvelist
cvelist
CVE-2009-1704
2009-06-10 17:37:00
openvas
openvas
Apple Safari Multiple Vulnerabilities - 01 - (Jun 2009) - Windows
2009-06-16 00:00:00
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
2009-06-16 00:00:00
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00
nessus
nessus
Mac OS X : Apple Safari < 4.0
2009-06-09 00:00:00
Safari < 4.0 Multiple Vulnerabilities
2009-06-09 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
6.8 Medium
AI Score
Confidence
Low
0.025 Low
EPSS
Percentile
90.2%
Related for CVE-2009-1704