CVE-2009-1713

2009-06-1018:00:00

Debian Security Bug Tracker

security-tracker.debian.org

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

79.4%

JSON

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian10allkde4libs< 4:4.14.38-3kde4libs_4:4.14.38-3_all.deb
Debian10allqt4-x11< 4:4.5.2-2qt4-x11_4:4.5.2-2_all.deb