CVE

Id
39116  
CVE No.
CVE-2009-1681  
Status
Candidate  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct "clickjacking" attacks via a crafted HTML document.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429509 39116 CVE-2009-1681 CONFIRM:http://support.apple.com/kb/HT3613  View
429510 39116 CVE-2009-1681 CONFIRM:http://support.apple.com/kb/HT3639  View
429511 39116 CVE-2009-1681 APPLE:APPLE-SA-2009-06-08-1  View
429512 39116 CVE-2009-1681 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
429513 39116 CVE-2009-1681 APPLE:APPLE-SA-2009-06-17-1  View
429514 39116 CVE-2009-1681 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html  View
429515 39116 CVE-2009-1681 DEBIAN:DSA-1950  View
429516 39116 CVE-2009-1681 URL:http://www.debian.org/security/2009/dsa-1950  View
429517 39116 CVE-2009-1681 SUSE:SUSE-SR:2011:002  View
429518 39116 CVE-2009-1681 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
429519 39116 CVE-2009-1681 BID:35260  View
429520 39116 CVE-2009-1681 URL:http://www.securityfocus.com/bid/35260  View
429521 39116 CVE-2009-1681 BID:35317  View
429522 39116 CVE-2009-1681 URL:http://www.securityfocus.com/bid/35317  View
429523 39116 CVE-2009-1681 OSVDB:54981  View
429524 39116 CVE-2009-1681 URL:http://osvdb.org/54981  View
429525 39116 CVE-2009-1681 SECUNIA:35379  View
429526 39116 CVE-2009-1681 URL:http://secunia.com/advisories/35379  View
429527 39116 CVE-2009-1681 SECUNIA:37746  View
429528 39116 CVE-2009-1681 URL:http://secunia.com/advisories/37746  View
429529 39116 CVE-2009-1681 SECUNIA:43068  View
429530 39116 CVE-2009-1681 URL:http://secunia.com/advisories/43068  View
429531 39116 CVE-2009-1681 VUPEN:ADV-2009-1522  View
429532 39116 CVE-2009-1681 URL:http://www.vupen.com/english/advisories/2009/1522  View
429533 39116 CVE-2009-1681 VUPEN:ADV-2009-1621  View
429534 39116 CVE-2009-1681 URL:http://www.vupen.com/english/advisories/2009/1621  View
429535 39116 CVE-2009-1681 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40746 JVNDB-2009-001752 複数の Apple 製品における document.implementation プロパティの処理に関するクロスサイトスクリプティングの脆弱性 複数の Apple 製品の WebKit には、document.implementation プロパティを上書きすることによるクロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1685 39116 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001752.html  View