CVE

Id
39129  
CVE No.
CVE-2009-1694  
Status
Candidate  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site image capture issue."  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429880 39129 CVE-2009-1694 CONFIRM:http://support.apple.com/kb/HT3613  View
429881 39129 CVE-2009-1694 CONFIRM:http://support.apple.com/kb/HT3639  View
429882 39129 CVE-2009-1694 APPLE:APPLE-SA-2009-06-08-1  View
429883 39129 CVE-2009-1694 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
429884 39129 CVE-2009-1694 APPLE:APPLE-SA-2009-06-17-1  View
429885 39129 CVE-2009-1694 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html  View
429886 39129 CVE-2009-1694 DEBIAN:DSA-1950  View
429887 39129 CVE-2009-1694 URL:http://www.debian.org/security/2009/dsa-1950  View
429888 39129 CVE-2009-1694 SUSE:SUSE-SR:2011:002  View
429889 39129 CVE-2009-1694 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
429890 39129 CVE-2009-1694 BID:35260  View
429891 39129 CVE-2009-1694 URL:http://www.securityfocus.com/bid/35260  View
429892 39129 CVE-2009-1694 BID:35322  View
429893 39129 CVE-2009-1694 URL:http://www.securityfocus.com/bid/35322  View
429894 39129 CVE-2009-1694 OSVDB:55005  View
429895 39129 CVE-2009-1694 URL:http://osvdb.org/55005  View
429896 39129 CVE-2009-1694 SECUNIA:35379  View
429897 39129 CVE-2009-1694 URL:http://secunia.com/advisories/35379  View
429898 39129 CVE-2009-1694 SECUNIA:37746  View
429899 39129 CVE-2009-1694 URL:http://secunia.com/advisories/37746  View
429900 39129 CVE-2009-1694 SECUNIA:43068  View
429901 39129 CVE-2009-1694 URL:http://secunia.com/advisories/43068  View
429902 39129 CVE-2009-1694 VUPEN:ADV-2009-1522  View
429903 39129 CVE-2009-1694 URL:http://www.vupen.com/english/advisories/2009/1522  View
429904 39129 CVE-2009-1694 VUPEN:ADV-2009-1621  View
429905 39129 CVE-2009-1694 URL:http://www.vupen.com/english/advisories/2009/1621  View
429906 39129 CVE-2009-1694 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40767 JVNDB-2009-001773 複数の Apple 製品における CSS attr 関数の処理に関する任意のコードを実行される脆弱性 複数の Apple 製品の WebKit には、大きい数値の引数をもつカスケーディングスタイルシート (CSS) attr 関数の処理でポインタを初期化しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1698 39129 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001773.html  View