CVE

Id
39139  
CVE No.
CVE-2009-1704  
Status
Candidate  
Description
CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430168 39139 CVE-2009-1704 CONFIRM:http://support.apple.com/kb/HT3613  View
430169 39139 CVE-2009-1704 APPLE:APPLE-SA-2009-06-08-1  View
430170 39139 CVE-2009-1704 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430171 39139 CVE-2009-1704 BID:35260  View
430172 39139 CVE-2009-1704 URL:http://www.securityfocus.com/bid/35260  View
430173 39139 CVE-2009-1704 BID:35344  View
430174 39139 CVE-2009-1704 URL:http://www.securityfocus.com/bid/35344  View
430175 39139 CVE-2009-1704 OSVDB:55010  View
430176 39139 CVE-2009-1704 URL:http://osvdb.org/55010  View
430177 39139 CVE-2009-1704 SECTRACK:1022343  View
430178 39139 CVE-2009-1704 URL:http://securitytracker.com/id?1022343  View
430179 39139 CVE-2009-1704 SECUNIA:35379  View
430180 39139 CVE-2009-1704 URL:http://secunia.com/advisories/35379  View
430181 39139 CVE-2009-1704 VUPEN:ADV-2009-1522  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40743 JVNDB-2009-001749 Apple Safari における open-help-anchor URL ハンドラ の処理に関する任意のコードを実行される脆弱性 Apple Safari には、open-help-anchor URL ハンドラ の処理に不備があることにより、任意のコードを実行される、あるいは重要な情報が漏えいする脆弱性が存在します。 CVE-2009-1708 39139 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001749.html  View