CVE

Id
39143  
CVE No.
CVE-2009-1708  
Status
Candidate  
Description
Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430225 39143 CVE-2009-1708 CONFIRM:http://support.apple.com/kb/HT3613  View
430226 39143 CVE-2009-1708 APPLE:APPLE-SA-2009-06-08-1  View
430227 39143 CVE-2009-1708 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430228 39143 CVE-2009-1708 BID:35260  View
430229 39143 CVE-2009-1708 URL:http://www.securityfocus.com/bid/35260  View
430230 39143 CVE-2009-1708 BID:35351  View
430231 39143 CVE-2009-1708 URL:http://www.securityfocus.com/bid/35351  View
430232 39143 CVE-2009-1708 OSVDB:55011  View
430233 39143 CVE-2009-1708 URL:http://osvdb.org/55011  View
430234 39143 CVE-2009-1708 SECTRACK:1022345  View
430235 39143 CVE-2009-1708 URL:http://securitytracker.com/id?1022345  View
430236 39143 CVE-2009-1708 SECUNIA:35379  View
430237 39143 CVE-2009-1708 URL:http://secunia.com/advisories/35379  View
430238 39143 CVE-2009-1708 VUPEN:ADV-2009-1522  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40756 JVNDB-2009-001762 Apple Safari の WebKit におけるローカル Java アプレットに関する任意のコードを実行される脆弱性 Apple Safari の WebKit には、ローカル Java アプレットのロードを防止しないため、任意のコードを実行される、権限を取得される、または重要な情報を取得される脆弱性が存在します。 CVE-2009-1712 39143 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001762.html  View