CVE-2009-1694

CVE-2009-1694 affects WebKit in Apple Safari

CVE-2009-1681

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct "clickjacking" attacks via a craft...

CVE-2009-1689

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL, leading to...

CVE-2009-1687

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...

CVE-2009-1691

Cross-site scripting XSS vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript...

CVE-2009-1691

CVE-2009-1691 is a cross-site scripting (XSS) vulnerability affecting WebKit in Apple Safari prior to 4.0, and the iPhone OS family up to 2.2.1. The root cause is insufficient access control for standard JavaScript prototypes across domains, enabling remote attackers to inject arbitrary web scrip...

CVE-2009-1684

WebKit-based XSS in Safari (pre-4.0) and iPhone OS up to 2.2.1 can be triggered via an event handler to run arbitrary scripts in the next loaded document. Root cause: improper handling of event-driven script execution in WebKit. Impact: remote code execution via crafted HTML documents. Remediatio...

CVE-2009-1681

Summary: CVE-2009-1681 affects WebKit in Apple Safari (and iPhone OS variants) where loading third-party content into a subframe bypasses the Same Origin Policy, enabling clickjacking. The connected documents provide detailed CVE entries and advisories, notably Debian DSA-1950-1 and openVAS/Nessu...

CVE-2009-1690

CVE-2009-1690 is a use-after-free in WebKit affecting Safari (pre-4.0) and related WebKit-based products (iPhone OS 1.0–2.2.1, iPod touch 1.1–2.2.1, Google Chrome 1.0.154.53). The issue arises when a crafted HTML tag property causes child elements to be freed and later accessed during an HTML err...

CVE-2009-1690

Removed by vendor...

CVE-2009-1693

Removed by vendor...

CVE-2009-1688

Removed by vendor...

CVE-2009-1689

Removed by vendor...

CVE-2009-1690

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service memory...

CVE-2009-1693

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."...

CVE-2009-1685

CVE-2009-1685 is a documented XSS vulnerability in WebKit used by Apple Safari prior to 4.0 and by iOS webviews (iPhone OS 1.0–2.2.1). The root cause, as described in authoritative sources, is that overwriting the document.implementation property of either an embedded document or a parent documen...

CVE-2009-1684

Removed by vendor...

CVE-2009-1681

Removed by vendor...

CVE-2009-1689

The CVE-2009-1689 entry concerns a Cross-site scripting (XSS) vulnerability in WebKit used by Apple Safari up to version 4.0, affecting iOS 1.0–2.2.1 and iPod touch equivalents. The issue allows remote attackers to inject arbitrary script or HTML via vectors involving submitting a form to about:b...

CVE-2009-1688

CVE-2009-1688 is a WebKit-based XSS vulnerability affecting Apple Safari up to version 4.0 (and iPhone OS 1.0–2.2.1, iPod touch 1.1–2.2.1). The issue arises from WebKit not using the HTML5 standard method to determine the security context, enabling remote attackers to inject arbitrary script or H...