CVE

Id
39128  
CVE No.
CVE-2009-1693  
Status
Candidate  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429853 39128 CVE-2009-1693 CONFIRM:http://support.apple.com/kb/HT3613  View
429854 39128 CVE-2009-1693 CONFIRM:http://support.apple.com/kb/HT3639  View
429855 39128 CVE-2009-1693 APPLE:APPLE-SA-2009-06-08-1  View
429856 39128 CVE-2009-1693 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
429857 39128 CVE-2009-1693 APPLE:APPLE-SA-2009-06-17-1  View
429858 39128 CVE-2009-1693 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html  View
429859 39128 CVE-2009-1693 DEBIAN:DSA-1950  View
429860 39128 CVE-2009-1693 URL:http://www.debian.org/security/2009/dsa-1950  View
429861 39128 CVE-2009-1693 SUSE:SUSE-SR:2011:002  View
429862 39128 CVE-2009-1693 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
429863 39128 CVE-2009-1693 BID:35260  View
429864 39128 CVE-2009-1693 URL:http://www.securityfocus.com/bid/35260  View
429865 39128 CVE-2009-1693 BID:35331  View
429866 39128 CVE-2009-1693 URL:http://www.securityfocus.com/bid/35331  View
429867 39128 CVE-2009-1693 OSVDB:55004  View
429868 39128 CVE-2009-1693 URL:http://osvdb.org/55004  View
429869 39128 CVE-2009-1693 SECUNIA:35379  View
429870 39128 CVE-2009-1693 URL:http://secunia.com/advisories/35379  View
429871 39128 CVE-2009-1693 SECUNIA:37746  View
429872 39128 CVE-2009-1693 URL:http://secunia.com/advisories/37746  View
429873 39128 CVE-2009-1693 SECUNIA:43068  View
429874 39128 CVE-2009-1693 URL:http://secunia.com/advisories/43068  View
429875 39128 CVE-2009-1693 VUPEN:ADV-2009-1522  View
429876 39128 CVE-2009-1693 URL:http://www.vupen.com/english/advisories/2009/1522  View
429877 39128 CVE-2009-1693 VUPEN:ADV-2009-1621  View
429878 39128 CVE-2009-1693 URL:http://www.vupen.com/english/advisories/2009/1621  View
429879 39128 CVE-2009-1693 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40766 JVNDB-2009-001772 複数の Apple 製品における XMLHttpRequest の処理に関する CRLF インジェクションの脆弱性 複数の Apple 製品の WebKit には、HTML ドキュメントの処理に不備があることにより、HTTP ヘッダを注入され、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2009-1697 39128 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001772.html  View