Lucene search

[email protected]CVE-2009-5097

HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-5097

2022-10-0316:24:01

CWE-94

[email protected]

web.nvd.nist.gov

cve-2009-5097

palm pre

webos

javascript

remote execution

vulnerability

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.

Affected configurations

NVD

Node

hppalm_pre_webosRange≤1.1.0

hppalm_pre_webosMatch1.0.2

hppalm_pre_webosMatch1.0.3

hppalm_pre_webosMatch1.0.4

CPENameOperatorVersion
hp:palm_pre_weboshp palm pre webosle1.1.0
hp:palm_pre_weboshp palm pre weboseq1.0.2
hp:palm_pre_weboshp palm pre weboseq1.0.3
hp:palm_pre_weboshp palm pre weboseq1.0.4

CPE	Name	Operator	Version
hp:palm_pre_webos	hp palm pre webos	le	1.1.0
hp:palm_pre_webos	hp palm pre webos	eq	1.0.2
hp:palm_pre_webos	hp palm pre webos	eq	1.0.3
hp:palm_pre_webos	hp palm pre webos	eq	1.0.4

References

kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12

secunia.com/advisories/36936

tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html

www.precentral.net/webos-1-2-fixed-serious-file-security-issue

www.securitytracker.com/id?1022987

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

7.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

JSON

Related for CVE-2009-5097

cvelist1 prion1 nvd1