NVD

Id
48953  
Name
CVE-2009-1684  
Description
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1684  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247325 48953 CVE-2009-1684 APPLE-SA-2009-06-08-1  View
247326 48953 CVE-2009-1684 APPLE-SA-2009-06-17-1  View
247327 48953 CVE-2009-1684 SUSE-SR:2011:002  View
247328 48953 CVE-2009-1684 1022344  View
247329 48953 CVE-2009-1684 http://support.apple.com/kb/HT3613  View
247330 48953 CVE-2009-1684 http://support.apple.com/kb/HT3639  View
247331 48953 CVE-2009-1684 DSA-1950  View
247332 48953 CVE-2009-1684 35260  View
247333 48953 CVE-2009-1684 ADV-2009-1522  View
247334 48953 CVE-2009-1684 ADV-2009-1621  View
247335 48953 CVE-2009-1684 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40745 JVNDB-2009-001751 複数の Apple 製品におけるイベントハンドラの処理に関するクロスサイトスクリプティングの脆弱性 複数の Apple 製品の WebKit には、イベントハンドラの処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1684 39115 CVE-2009-1684 48953 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001751.html 2009-06-08 2009-07-14 View