Lucene search

MitreCVE-2009-2841

HistoryNov 13, 2009 - 3:30 p.m.

CVE-2009-2841

2009-11-1315:30:00

mitre

web.nvd.nist.gov

cve-2009-2841

htmlmediaelement

loadresource

webkit

webcore

safari

mac os x

remote attackers

sub-resource requests

html 5

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

High

EPSS

0.006

Percentile

78.4%

JSON

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.

Affected configurations

Nvd

Node

applesafariRange≤4.0.3

applesafariMatch0.8

applesafariMatch0.9

applesafariMatch1.0

applesafariMatch1.0beta

applesafariMatch1.0beta2

applesafariMatch1.0.0

applesafariMatch1.0.0b1

applesafariMatch1.0.0b2

applesafariMatch1.0.1

applesafariMatch1.0.2

applesafariMatch1.0.3

applesafariMatch1.1.0

applesafariMatch1.1.1

applesafariMatch1.2

applesafariMatch1.2.0

applesafariMatch1.2.1

applesafariMatch1.2.2

applesafariMatch1.2.3

applesafariMatch1.2.4

applesafariMatch1.2.5

applesafariMatch1.3

applesafariMatch1.3.0

applesafariMatch1.3.1

applesafariMatch1.3.2

applesafariMatch2

applesafariMatch2.0

applesafariMatch2.0.0

applesafariMatch2.0.1

applesafariMatch2.0.2

applesafariMatch2.0.3

applesafariMatch2.0.3417.8

applesafariMatch2.0.3417.9

applesafariMatch2.0.3417.9.2

applesafariMatch2.0.3417.9.3

applesafariMatch2.0.3_417.9.3

applesafariMatch2.0.4

applesafariMatch2.0.4_419.3

applesafariMatch2.0_pre

applesafariMatch3

applesafariMatch3.0

applesafariMatch3.0.0

applesafariMatch3.0.0b

applesafariMatch3.0.1

applesafariMatch3.0.1beta

applesafariMatch3.0.1b

applesafariMatch3.0.2

applesafariMatch3.0.2b

applesafariMatch3.0.3

applesafariMatch3.0.3b

applesafariMatch3.0.4

applesafariMatch3.0.4_beta

applesafariMatch3.0.4b

applesafariMatch3.1

applesafariMatch3.1.0

applesafariMatch3.1.0b

applesafariMatch3.1.1

applesafariMatch3.1.2

applesafariMatch3.2

applesafariMatch3.2.0

applesafariMatch3.2.1

applesafariMatch3.2.2

applesafariMatch3.2.3

applesafariMatch4.0

applesafariMatch4.0beta

applesafariMatch4.0.0b

applesafariMatch4.0.1

applesafariMatch4.0.2

AND

applemac_os_x

VendorProductVersionCPE
applesafari1.2.2cpe:/a:apple:safari:1.2.2:::
applesafari3.0.3bcpe:/a:apple:safari:3.0.3b:::
applesafari3.2.1cpe:/a:apple:safari:3.2.1:::
applesafari3.0.1cpe:/a:apple:safari:3.0.1:::
applesafari3.1.0bcpe:/a:apple:safari:3.1.0b:::
applesafari1.1.0cpe:/a:apple:safari:1.1.0:::
applesafari3.0.1bcpe:/a:apple:safari:3.0.1b:::
applesafari3.0.3cpe:/a:apple:safari:3.0.3:::
applesafari1.0.0b2cpe:/a:apple:safari:1.0.0b2:::
applesafari2cpe:/a:apple:safari:2:::

Vendor	Product	Version	CPE
apple	safari	1.2.2	cpe:/a:apple:safari:1.2.2:::
apple	safari	3.0.3b	cpe:/a:apple:safari:3.0.3b:::
apple	safari	3.2.1	cpe:/a:apple:safari:3.2.1:::
apple	safari	3.0.1	cpe:/a:apple:safari:3.0.1:::
apple	safari	3.1.0b	cpe:/a:apple:safari:3.1.0b:::
apple	safari	1.1.0	cpe:/a:apple:safari:1.1.0:::
apple	safari	3.0.1b	cpe:/a:apple:safari:3.0.1b:::
apple	safari	3.0.3	cpe:/a:apple:safari:3.0.3:::
apple	safari	1.0.0b2	cpe:/a:apple:safari:1.0.0b2:::
apple	safari	2	cpe:/a:apple:safari:2:::