NVD

Id
48971  
Name
CVE-2009-1702  
Description
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2012-03-30  
Seq
2009-1702  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247565 48971 CVE-2009-1702 APPLE-SA-2009-06-08-1  View
247566 48971 CVE-2009-1702 APPLE-SA-2009-06-17-1  View
247567 48971 CVE-2009-1702 SUSE-SR:2011:002  View
247568 48971 CVE-2009-1702 1022344  View
247569 48971 CVE-2009-1702 http://support.apple.com/kb/HT3613  View
247570 48971 CVE-2009-1702 http://support.apple.com/kb/HT3639  View
247571 48971 CVE-2009-1702 35260  View
247572 48971 CVE-2009-1702 35327  View
247573 48971 CVE-2009-1702 ADV-2009-1522  View
247574 48971 CVE-2009-1702 ADV-2009-1621  View
247575 48971 CVE-2009-1702 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40771 JVNDB-2009-001777 複数の Apple 製品における Location と History オブジェクトの処理に関するクロスサイトスクリプティングの脆弱性 複数の Apple 製品の WebKit には、Location と History オブジェクトの処理に問題があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-1702 39133 CVE-2009-1702 48971 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001777.html 2009-06-08 2009-07-17 View