CVE-2009-1693Apple Safari vulnerability

2 documents2 sources
Severity
5.8MEDIUMNVD
EPSS
0.6%
top 29.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 10
Latest updateMay 2

Description

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

NVDapple/safari4.0_beta+25

Patches

🔴Vulnerability Details

1
GHSA
GHSA-q8xh-x524-cvfq: WebKit in Apple Safari before 42022-05-02