CVE-2009-1724
5.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.7%
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.
References
lists.apple.com/archives/security-announce/2009/Jul/msg00000.html
lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
osvdb.org/55738
secunia.com/advisories/35758
secunia.com/advisories/36677
secunia.com/advisories/43068
support.apple.com/kb/HT3666
support.apple.com/kb/HT3860
www.securityfocus.com/bid/35441
www.securitytracker.com/id?1022525
www.vupen.com/english/advisories/2009/1827
www.vupen.com/english/advisories/2011/0212
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208
Related
5.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.7%