VulnerabilityModified
CVE-2009-1724
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors…
MEDIUM 4.3EPSS 6.21%
Does this matter?
Lower severity and a low EPSS score (6.21%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 6.21% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- apple/safari · apple/iphone os · apple/ipod touch
- Source
- cve@mitre.org
References
- http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.htmlPatch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://osvdb.org/55738
- http://secunia.com/advisories/35758
- http://secunia.com/advisories/36677
- http://secunia.com/advisories/43068
- http://support.apple.com/kb/HT3666Patch, Vendor Advisory
- http://support.apple.com/kb/HT3860
- http://www.securityfocus.com/bid/35441Exploit
- http://www.securitytracker.com/id?1022525
- http://www.vupen.com/english/advisories/2009/1827
- http://www.vupen.com/english/advisories/2011/0212
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208
- http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.htmlPatch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://osvdb.org/55738
- http://secunia.com/advisories/35758
- http://secunia.com/advisories/36677
- http://secunia.com/advisories/43068
- http://support.apple.com/kb/HT3666Patch, Vendor Advisory
- http://support.apple.com/kb/HT3860
- http://www.securityfocus.com/bid/35441Exploit
- http://www.securitytracker.com/id?1022525
- http://www.vupen.com/english/advisories/2009/1827
- http://www.vupen.com/english/advisories/2011/0212
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.