CVE-2009-1712 — Code Injection in Apple Safari

CWE-94 — Code Injection4 documents3 sources
Severity
9.3CRITICALNVD
EPSS
4.8%
top 10.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Safari
Timeline
PublishedJun 10
Latest updateMay 2

Description

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/safari4.0_beta+25

Patches

Patch: lists.apple.com ↗Patch: securitytracker.com ↗Patch: support.apple.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-89qc-hh87-62xf: WebKit in Apple Safari before 4↗2022-05-02
▶

📋Vendor Advisories

2
Ubuntu
Qt vulnerabilities↗2009-11-10
▶
Ubuntu
WebKit vulnerabilities↗2009-09-23
▶