NVD

Id
48963  
Name
CVE-2009-1694  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site image capture issue."  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1694  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247460 48963 CVE-2009-1694 APPLE-SA-2009-06-08-1  View
247461 48963 CVE-2009-1694 APPLE-SA-2009-06-17-1  View
247462 48963 CVE-2009-1694 SUSE-SR:2011:002  View
247463 48963 CVE-2009-1694 http://support.apple.com/kb/HT3613  View
247464 48963 CVE-2009-1694 http://support.apple.com/kb/HT3639  View
247465 48963 CVE-2009-1694 DSA-1950  View
247466 48963 CVE-2009-1694 35260  View
247467 48963 CVE-2009-1694 35322  View
247468 48963 CVE-2009-1694 ADV-2009-1522  View
247469 48963 CVE-2009-1694 ADV-2009-1621  View
247470 48963 CVE-2009-1694 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40763 JVNDB-2009-001769 複数の Apple 製品におけるリダイレクト処理に関する任意の Web サイトから画像を読まれる脆弱性 複数の Apple 製品の WebKit には、リダイレクトを正しく処理しないことにより、任意の Web サイトから画像を読まれる脆弱性が存在します。 CVE-2009-1694 39125 CVE-2009-1694 48963 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001769.html 2009-06-08 2009-07-16 View