Lucene search

Ubuntu.comUB:CVE-2009-1713

HistoryJun 10, 2009 - 12:00 a.m.

CVE-2009-1713

2009-06-1000:00:00

ubuntu.com

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

79.4%

JSON

The XSLT functionality in WebKit in Apple Safari before 4.0 does not
properly implement the document function, which allows remote attackers to
read (1) arbitrary local files and (2) files from different security zones
via unspecified vectors.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=535793>

Notes

Author	Note
jdstrand	webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit
mdeslaur	code does not appear present in kde4libs

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchqt4-x11< 4.4.3-0ubuntu1.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.10	noarch	qt4-x11	< 4.4.3-0ubuntu1.4	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2009-1713

nvd.nist.gov/vuln/detail/CVE-2009-1713

security-tracker.debian.org/tracker/CVE-2009-1713

ubuntu.com/security/notices/USN-857-1

www.cve.org/CVERecord?id=CVE-2009-1713

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:C/I:N/A:N

0.006 Low

EPSS

Percentile

79.4%

JSON

Related for UB:CVE-2009-1713