cbcvebase.
CVE-2009-2199
published 2009-08-12

CVE-2009-2199: Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other…

PriorityP426medium5.8CVSS 2.0
AVNACMAuNCNIPAP
EPSS
2.59%
83.7th percentile
Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs.

Affected

49 ranges· showing 25
VendorProductVersion rangeFixed in
appleiphone_os<= 3.0.1—
appleiphone_os<= 3.1—
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
appleiphone_os——
applesafari<= 4.0.2—
applesafari——
applesafari——
applesafari——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.