Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-2200
HistoryAug 12, 2009 - 7:30 p.m.

CVE-2009-2200

2009-08-1219:30:00
Debian Security Bug Tracker
security-tracker.debian.org
6

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.004 Low

EPSS

Percentile

74.8%

WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document.

OSVersionArchitecturePackageVersionFilename
Debian10allqt4-x11< 4:4.8.7+dfsg-18+deb10u1qt4-x11_4:4.8.7+dfsg-18+deb10u1_all.deb

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.004 Low

EPSS

Percentile

74.8%

Related for DEBIANCVE:CVE-2009-2200