CVE

Id
39138  
CVE No.
CVE-2009-1703  
Status
Candidate  
Description
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430150 39138 CVE-2009-1703 CONFIRM:http://support.apple.com/kb/HT3613  View
430151 39138 CVE-2009-1703 APPLE:APPLE-SA-2009-06-08-1  View
430152 39138 CVE-2009-1703 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430153 39138 CVE-2009-1703 SUSE:SUSE-SR:2011:002  View
430154 39138 CVE-2009-1703 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
430155 39138 CVE-2009-1703 BID:35260  View
430156 39138 CVE-2009-1703 URL:http://www.securityfocus.com/bid/35260  View
430157 39138 CVE-2009-1703 BID:35333  View
430158 39138 CVE-2009-1703 URL:http://www.securityfocus.com/bid/35333  View
430159 39138 CVE-2009-1703 OSVDB:55009  View
430160 39138 CVE-2009-1703 URL:http://osvdb.org/55009  View
430161 39138 CVE-2009-1703 SECUNIA:35379  View
430162 39138 CVE-2009-1703 URL:http://secunia.com/advisories/35379  View
430163 39138 CVE-2009-1703 SECUNIA:43068  View
430164 39138 CVE-2009-1703 URL:http://secunia.com/advisories/43068  View
430165 39138 CVE-2009-1703 VUPEN:ADV-2009-1522  View
430166 39138 CVE-2009-1703 URL:http://www.vupen.com/english/advisories/2009/1522  View
430167 39138 CVE-2009-1703 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40742 JVNDB-2009-001748 Apple Safari の「Safari をリセット」における保存されているウェブサイトパスワードを読まれる脆弱性 Windows 上で動作する Apple Safari の「Safari をリセット」には、保存されているウェブサイトパスワードを読まれる脆弱性が存在します。 CVE-2009-1707 39138 1.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001748.html  View