Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1684
HistoryJun 10, 2009 - 12:00 a.m.

CVE-2009-1684

2009-06-1000:00:00
ubuntu.com
ubuntu.com
9

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.116 Low

EPSS

Percentile

95.2%

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before
4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through
2.2.1 allows remote attackers to inject arbitrary web script or HTML via an
event handler that triggers script execution in the context of the next
loaded document.

Bugs

Notes

Author Note
jdstrand webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit
mdeslaur code does not seem present in kde4libs

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.116 Low

EPSS

Percentile

95.2%