NVD

Id
50063  
Name
CVE-2009-2841  
Description
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-11-13  
Modified Date
2011-03-17  
Seq
2009-2841  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
253287 50063 CVE-2009-2841 APPLE-SA-2009-11-11-1  View
253288 50063 CVE-2009-2841 APPLE-SA-2010-02-02-1  View
253289 50063 CVE-2009-2841 FEDORA-2010-11011  View
253290 50063 CVE-2009-2841 FEDORA-2010-11020  View
253291 50063 CVE-2009-2841 SUSE-SR:2011:002  View
253292 50063 CVE-2009-2841 http://support.apple.com/kb/HT3949  View
253293 50063 CVE-2009-2841 http://support.apple.com/kb/HT4013  View
253294 50063 CVE-2009-2841 http://threatpost.com/en_us/blogs/apple-patches-critical-safari-vulnerabilities-111109  View
253295 50063 CVE-2009-2841 http://trac.webkit.org/changeset/49480  View
253296 50063 CVE-2009-2841 MDVSA-2011:039  View
253297 50063 CVE-2009-2841 36996  View
253298 50063 CVE-2009-2841 1023167  View
253299 50063 CVE-2009-2841 USN-1006-1  View
253300 50063 CVE-2009-2841 ADV-2009-3217  View
253301 50063 CVE-2009-2841 ADV-2010-1801  View
253302 50063 CVE-2009-2841 ADV-2010-2722  View
253303 50063 CVE-2009-2841 ADV-2011-0212  View
253304 50063 CVE-2009-2841 ADV-2011-0552  View
253305 50063 CVE-2009-2841 safari-5media-security-bypass(54242)  View
253306 50063 CVE-2009-2841 https://bugzilla.redhat.com/show_bug.cgi?id=525791  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41389 JVNDB-2009-002396 Apple Safari の WebKit における任意の Web サイトにリクエストされる脆弱性 Mac OS X で稼働している Apple Safari の WebKit には、HTML ドキュメントの処理に不備があるため、任意の Web サイトにリクエストされる脆弱性が存在します。 CVE-2009-2841 40272 CVE-2009-2841 50063 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002396.html 2009-11-11 2010-02-25 View