NVD

Id
48958  
Name
CVE-2009-1689  
Description
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL, leading to security-context replacement.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1689  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247390 48958 CVE-2009-1689 APPLE-SA-2009-06-08-1  View
247391 48958 CVE-2009-1689 APPLE-SA-2009-06-17-1  View
247392 48958 CVE-2009-1689 SUSE-SR:2011:002  View
247393 48958 CVE-2009-1689 1022344  View
247394 48958 CVE-2009-1689 http://support.apple.com/kb/HT3613  View
247395 48958 CVE-2009-1689 http://support.apple.com/kb/HT3639  View
247396 48958 CVE-2009-1689 35260  View
247397 48958 CVE-2009-1689 35332  View
247398 48958 CVE-2009-1689 ADV-2009-1522  View
247399 48958 CVE-2009-1689 ADV-2009-1621  View
247400 48958 CVE-2009-1689 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40750 JVNDB-2009-001756 複数の Apple 製品における about:blank URI に関するクロスサイトスクリプティングの脆弱性 複数の Apple 製品の WebKit には、about:blank URI に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1689 39120 CVE-2009-1689 48958 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001756.html 2009-06-08 2009-07-14 View