WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - Patch, Vendor Advisory | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - | |
| References | () http://osvdb.org/55022 - | |
| References | () http://secunia.com/advisories/35379 - Vendor Advisory | |
| References | () http://secunia.com/advisories/36790 - | |
| References | () http://secunia.com/advisories/37746 - | |
| References | () http://secunia.com/advisories/43068 - | |
| References | () http://securitytracker.com/id?1022345 - Patch | |
| References | () http://support.apple.com/kb/HT3613 - Patch, Vendor Advisory | |
| References | () http://www.debian.org/security/2009/dsa-1950 - | |
| References | () http://www.securityfocus.com/bid/35260 - Exploit, Patch | |
| References | () http://www.securityfocus.com/bid/35350 - | |
| References | () http://www.ubuntu.com/usn/USN-836-1 - | |
| References | () http://www.ubuntu.com/usn/USN-857-1 - | |
| References | () http://www.vupen.com/english/advisories/2009/1522 - Patch, Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2011/0212 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/51266 - |
Information
Published : 2009-06-10 18:00
Updated : 2024-11-21 01:03
NVD link : CVE-2009-1712
Mitre link : CVE-2009-1712
CVE.ORG link : CVE-2009-1712
JSON object : View
Products Affected
apple
- safari
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')