CVE-2009-2841

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

Design/Logic Flaw

The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attacke...

CVE-2009-2841

CVE-2009-2841 affects WebKit’s HTMLMediaElement: loadResource in WebCore (WebKit before r49480) used by Safari before 4.0.4 on macOS. The vulnerability arises because HTML5 media elements with external URLs do not perform the expected callbacks, enabling a remote attacker to trigger sub-resource ...