CVE

Id
39150  
CVE No.
CVE-2009-1715  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430406 39150 CVE-2009-1715 CONFIRM:http://support.apple.com/kb/HT3613  View
430407 39150 CVE-2009-1715 APPLE:APPLE-SA-2009-06-08-1  View
430408 39150 CVE-2009-1715 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430409 39150 CVE-2009-1715 SUSE:SUSE-SR:2011:002  View
430410 39150 CVE-2009-1715 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
430411 39150 CVE-2009-1715 BID:35260  View
430412 39150 CVE-2009-1715 URL:http://www.securityfocus.com/bid/35260  View
430413 39150 CVE-2009-1715 BID:35349  View
430414 39150 CVE-2009-1715 URL:http://www.securityfocus.com/bid/35349  View
430415 39150 CVE-2009-1715 OSVDB:54996  View
430416 39150 CVE-2009-1715 URL:http://osvdb.org/54996  View
430417 39150 CVE-2009-1715 SECTRACK:1022344  View
430418 39150 CVE-2009-1715 URL:http://securitytracker.com/id?1022344  View
430419 39150 CVE-2009-1715 SECUNIA:35379  View
430420 39150 CVE-2009-1715 URL:http://secunia.com/advisories/35379  View
430421 39150 CVE-2009-1715 SECUNIA:43068  View
430422 39150 CVE-2009-1715 URL:http://secunia.com/advisories/43068  View
430423 39150 CVE-2009-1715 VUPEN:ADV-2009-1522  View
430424 39150 CVE-2009-1715 URL:http://www.vupen.com/english/advisories/2009/1522  View
430425 39150 CVE-2009-1715 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40825 JVNDB-2009-001831 Mac OS X 上で稼働している Java における任意のコードを実行される脆弱性 Mac OS X 上で稼働している Java の「Aqua Look and Feel for Java」実装には文書化されていない apple.laf.CColourUIResource コンストラクタの呼び出しに不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-1719 39150 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001831.html  View