NVD

Id
48957  
Name
CVE-2009-1688  
Description
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is not the "HTML 5 standard method."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1688  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247379 48957 CVE-2009-1688 APPLE-SA-2009-06-08-1  View
247380 48957 CVE-2009-1688 APPLE-SA-2009-06-17-1  View
247381 48957 CVE-2009-1688 SUSE-SR:2011:002  View
247382 48957 CVE-2009-1688 1022344  View
247383 48957 CVE-2009-1688 http://support.apple.com/kb/HT3613  View
247384 48957 CVE-2009-1688 http://support.apple.com/kb/HT3639  View
247385 48957 CVE-2009-1688 35260  View
247386 48957 CVE-2009-1688 35320  View
247387 48957 CVE-2009-1688 ADV-2009-1522  View
247388 48957 CVE-2009-1688 ADV-2009-1621  View
247389 48957 CVE-2009-1688 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40749 JVNDB-2009-001755 複数の Apple 製品におけるセキュリティコンテキストの処理に関するクロスサイトスクリプティングの脆弱性 複数の Apple 製品の WebKit には、セキュリティコンテキストの特定に HTML 5 標準規格が用いられないため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1688 39119 CVE-2009-1688 48957 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001755.html 2009-06-08 2009-07-14 View