Lucene search

K
cve[email protected]CVE-2009-1713
HistoryJun 10, 2009 - 6:00 p.m.

CVE-2009-1713

2009-06-1018:00:00
CWE-200
web.nvd.nist.gov
40
cve-2009-1713
xslt functionality
webkit
apple safari
security vulnerability
remote attack
nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.

Affected configurations

NVD
Node
applesafariRange4.0_betamac
OR
applesafariMatch0.8mac
OR
applesafariMatch0.9mac
OR
applesafariMatch1.0mac
OR
applesafariMatch1.0.3mac
OR
applesafariMatch1.1mac
OR
applesafariMatch1.2mac
OR
applesafariMatch1.3mac
OR
applesafariMatch1.3.1mac
OR
applesafariMatch1.3.2mac
OR
applesafariMatch2.0mac
OR
applesafariMatch2.0.2mac
OR
applesafariMatch2.0.4mac
OR
applesafariMatch3.0mac
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.3mac
OR
applesafariMatch3.0.4mac
OR
applesafariMatch3.1mac
OR
applesafariMatch3.1.1mac
OR
applesafariMatch3.1.2mac
OR
applesafariMatch3.2.1mac
OR
applesafariMatch3.2.3mac
Node
applesafariRange3.2.3windows
OR
applesafariMatch3.0windows
OR
applesafariMatch3.0.1windows
OR
applesafariMatch3.0.2windows
OR
applesafariMatch3.0.3windows
OR
applesafariMatch3.0.4windows
OR
applesafariMatch3.1windows
OR
applesafariMatch3.1.1windows
OR
applesafariMatch3.1.2windows
OR
applesafariMatch3.2-windows
OR
applesafariMatch3.2.1windows
OR
applesafariMatch3.2.2windows

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

6.9 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.4%