CVE-2009-1694

2009-06-1014:30:00

Debian Security Bug Tracker

security-tracker.debian.org

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.005 Low

EPSS

Percentile

75.9%

JSON

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a “cross-site image capture issue.”

OSVersionArchitecturePackageVersionFilename
Debian10allkde4libs< 4:4.14.38-3kde4libs_4:4.14.38-3_all.deb
Debian10allqt4-x11< 4:4.6.2-4qt4-x11_4:4.6.2-4_all.deb