CVE

Id
39635  
CVE No.
CVE-2009-2200  
Status
Candidate  
Description
WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document.  
Phase
Assigned (20090624)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
435922 39635 CVE-2009-2200 CONFIRM:http://support.apple.com/kb/HT3733  View
435923 39635 CVE-2009-2200 APPLE:APPLE-SA-2009-08-11-1  View
435924 39635 CVE-2009-2200 URL:http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html  View
435925 39635 CVE-2009-2200 SUSE:SUSE-SR:2011:002  View
435926 39635 CVE-2009-2200 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
435927 39635 CVE-2009-2200 BID:36024  View
435928 39635 CVE-2009-2200 URL:http://www.securityfocus.com/bid/36024  View
435929 39635 CVE-2009-2200 SECTRACK:1022720  View
435930 39635 CVE-2009-2200 URL:http://www.securitytracker.com/id?1022720  View
435931 39635 CVE-2009-2200 SECUNIA:43068  View
435932 39635 CVE-2009-2200 URL:http://secunia.com/advisories/43068  View
435933 39635 CVE-2009-2200 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40963 JVNDB-2009-001969 Apple iPhone OS における SMS メッセージの処理に関する任意のコードを実行される脆弱性 Apple iPhone OS の CoreTelephony コンポーネントには、SMS メッセージの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2204 39635 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001969.html  View