NVD

Id
48950  
Name
CVE-2009-1681  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct "clickjacking" attacks via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1681  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247302 48950 CVE-2009-1681 APPLE-SA-2009-06-08-1  View
247303 48950 CVE-2009-1681 APPLE-SA-2009-06-17-1  View
247304 48950 CVE-2009-1681 SUSE-SR:2011:002  View
247305 48950 CVE-2009-1681 http://support.apple.com/kb/HT3613  View
247306 48950 CVE-2009-1681 http://support.apple.com/kb/HT3639  View
247307 48950 CVE-2009-1681 DSA-1950  View
247308 48950 CVE-2009-1681 35260  View
247309 48950 CVE-2009-1681 35317  View
247310 48950 CVE-2009-1681 ADV-2009-1522  View
247311 48950 CVE-2009-1681 ADV-2009-1621  View
247312 48950 CVE-2009-1681 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40744 JVNDB-2009-001750 複数の Apple 製品におけるサブフレームの処理に関する同一生成元ポリシーを回避される脆弱性 複数の Apple 製品の WebKit には、他社 Web サイトからサブフレームのページ読み込みを防止しないため、同一生成元ポリシーを回避される脆弱性が存在します。 CVE-2009-1681 39112 CVE-2009-1681 48950 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001750.html 2009-06-08 2009-07-14 View