CVE

Id
39149  
CVE No.
CVE-2009-1714  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430380 39149 CVE-2009-1714 CONFIRM:http://support.apple.com/kb/HT3613  View
430381 39149 CVE-2009-1714 APPLE:APPLE-SA-2009-06-08-1  View
430382 39149 CVE-2009-1714 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430383 39149 CVE-2009-1714 DEBIAN:DSA-1950  View
430384 39149 CVE-2009-1714 URL:http://www.debian.org/security/2009/dsa-1950  View
430385 39149 CVE-2009-1714 SUSE:SUSE-SR:2011:002  View
430386 39149 CVE-2009-1714 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
430387 39149 CVE-2009-1714 BID:35260  View
430388 39149 CVE-2009-1714 URL:http://www.securityfocus.com/bid/35260  View
430389 39149 CVE-2009-1714 BID:35348  View
430390 39149 CVE-2009-1714 URL:http://www.securityfocus.com/bid/35348  View
430391 39149 CVE-2009-1714 OSVDB:55023  View
430392 39149 CVE-2009-1714 URL:http://osvdb.org/55023  View
430393 39149 CVE-2009-1714 SECTRACK:1022344  View
430394 39149 CVE-2009-1714 URL:http://securitytracker.com/id?1022344  View
430395 39149 CVE-2009-1714 SECUNIA:35379  View
430396 39149 CVE-2009-1714 URL:http://secunia.com/advisories/35379  View
430397 39149 CVE-2009-1714 SECUNIA:37746  View
430398 39149 CVE-2009-1714 URL:http://secunia.com/advisories/37746  View
430399 39149 CVE-2009-1714 SECUNIA:43068  View
430400 39149 CVE-2009-1714 URL:http://secunia.com/advisories/43068  View
430401 39149 CVE-2009-1714 VUPEN:ADV-2009-1522  View
430402 39149 CVE-2009-1714 URL:http://www.vupen.com/english/advisories/2009/1522  View
430403 39149 CVE-2009-1714 VUPEN:ADV-2011-0212  View
430404 39149 CVE-2009-1714 URL:http://www.vupen.com/english/advisories/2011/0212  View
430405 39149 CVE-2009-1714 XF:safari-webinspector-xss(51268)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40760 JVNDB-2009-001766 Apple Safari の WebKit におけるドラッグイベントに関する情報漏えいの脆弱性 Apple Safari の WebKit には、ドラッグイベントの処理に不備があるため、重要な情報を取得される脆弱性が存在します。 CVE-2009-1718 39149 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001766.html  View