CVE-2009-1724
published 2009-07-09CVE-2009-1724: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and…
PriorityP424medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
6.21%
92.6th percentile
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.
Affected
48 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | iphone_os | <= 3.0.1 | — |
| apple | iphone_os | <= 3.1 | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | iphone_os | — | — |
| apple | safari | <= 4.0.1 | — |
| apple | safari | — | — |
| apple | safari | — | — |
| apple | safari | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_redhat4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g6jx-986q-p3fm: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4
ghsa_unreviewed·2022-05-02
CVE-2009-1724 [MEDIUM] CWE-79 GHSA-g6jx-986q-p3fm: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.
OSV
CVE-2009-1724: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4
osv·2009-07-09·CVSS 4.3
CVE-2009-1724 [MEDIUM] CVE-2009-1724: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.
Red Hat
kdelibs: possible XSS vulnerability
vendor_redhat·2009-05-20·CVSS 4.3
CVE-2009-1724 [MEDIUM] CWE-79 kdelibs: possible XSS vulnerability
kdelibs: possible XSS vulnerability
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.
Statement: Not vulnerable. This issue did not affect the versions of the kdelibs packages, as shipped with Red Hat Enterprise Linux 3, 4, or 5.
No detection rules found.
http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2009/Sep/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://osvdb.org/55738http://secunia.com/advisories/35758http://secunia.com/advisories/36677http://secunia.com/advisories/43068http://support.apple.com/kb/HT3666http://support.apple.com/kb/HT3860http://www.securityfocus.com/bid/35441http://www.securitytracker.com/id?1022525http://www.vupen.com/english/advisories/2009/1827http://www.vupen.com/english/advisories/2011/0212https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.htmlhttp://lists.apple.com/archives/security-announce/2009/Sep/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://osvdb.org/55738http://secunia.com/advisories/35758http://secunia.com/advisories/36677http://secunia.com/advisories/43068http://support.apple.com/kb/HT3666http://support.apple.com/kb/HT3860http://www.securityfocus.com/bid/35441http://www.securitytracker.com/id?1022525http://www.vupen.com/english/advisories/2009/1827http://www.vupen.com/english/advisories/2011/0212https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208
2009-07-09
Published