Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1671 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to execute arbitrary code via a long string argument to the (1) setInstallerType, (2) setAdditionalPackages, (3) compareVersion, (4) getStaticCLSID, or (5) launch method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8665 - http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html - http://www.securi
tps://www.exploit-db.com/exploits/8665 - http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html - http://www.securityfocus.com/bid/34931
CVE ID: CVE-2009-1672 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via a .jnlp URL in the argument to the launch method, and might allow remote attackers to launch JRE installation processes via the (2) installLatestJRE or (3) installJRE method. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8665 - http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html - https:/
nces: - https://www.exploit-db.com/exploits/8665 - http://www.shinnai.net/xplits/TXT_mhxRKrtrPLyAHRFNm7QR.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/50629 - http://www.securityfocus.com/bid/34931
CVE ID: CVE-2009-1673 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argument of AT_FDCWD. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35103 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6256 - http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-40-1 - http://www.vupen.com/english/advisories/2009/1388 - http://www.vupen.com/english/advisories/2009/1315 - http://osvdb.org/54464 -
ww.vupen.com/english/advisories/2009/1388 - http://www.vupen.com/english/advisories/2009/1315 - http://osvdb.org/54464 - http://www.securitytracker.com/id?1022232 - http://secunia.com/advisories/35119 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-257988-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50557 - http://support.avaya.com/elmodocs2/security/ASA-2009-188.htm - http://www.securityfocus.com/bid/34979
CVE ID: CVE-2009-1674 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly a related issue to CVE-2009-1608. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/8656 - http://secunia.com/advisories/35054
CVE ID: CVE-2009-1675 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 227 reply to a PASV command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/34838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50644 - https://www.exploit-db.com/exploits/8623
CVE ID: CVE-2009-1676 State: REJECTED Published: 2009-05-18T18:00:00 Last Updated: 2009-06-12T09:00:00 Description: No description available.
CVE ID: CVE-2009-1677 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple static code injection vulnerabilities in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allow (1) remote authenticated users to inject arbitrary PHP code into files by placing PHP sequences into the account's "display name" setting and then invoking boards/boards_rss.php, and might allow (2) remote attackers to inject arbitrary PHP code into files via the HTTP Host header in a request to boards/boards_rss.php. Additional Analyst Notes: - CVE Program Container: References: - http://secu
ader in a request to boards/boards_rss.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35057 - http://www.securityfocus.com/bid/34910 - http://www.securityfocus.com/archive/1/503435 - https://www.exploit-db.com/exploits/8659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/50631
CVE ID: CVE-2009-1678 State: PUBLISHED Published: 2009-05-18T18:00:00 Last Updated: 2024-08-07T05:20:35.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the saveFeed function in rss/feedcreator.class.php in Bitweaver 2.6 and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the version parameter to boards/boards_rss.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/35057 - http://www.securityfocus.com/bid/34910 - http://www.securityfocus.com/archive/1/503435 - https://www.exploit-db.com/exploits/8659
CVE ID: CVE-2009-1679 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T05:20:35.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Profiles component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1, when installing a configuration profile, can replace the password policy from Exchange ActiveSync with a weaker password policy, which allows physically proximate attackers to bypass the intended policy. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/51212 - http://www.vupen.com/english/advisories/2009/1621 - http:
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51212 - http://www.vupen.com/english/advisories/2009/1621 - http://osvdb.org/55239 - http://www.securityfocus.com/bid/35414 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.securityfocus.com/bid/35436
CVE ID: CVE-2009-1680 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T05:20:35.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly clear the search history when it is cleared from the Settings application, which allows physically proximate attackers to obtain the search history. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://www.securityfocus.com/bid/35414 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http
http://www.securityfocus.com/bid/35414 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.securityfocus.com/bid/35448 - http://osvdb.org/55240
CVE ID: CVE-2009-1681 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct "clickjacking" attacks via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/engl
39 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://osvdb.org/54981 - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://www.securityfocus.com/bid/35317
CVE ID: CVE-2009-1682 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 4.0 does not properly check for revoked Extended Validation (EV) certificates, which makes it easier for remote attackers to trick a user into accepting an invalid certificate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35353 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://www.securitytracker.com/id?1022346 - http://osvdb.org/
5260 - http://www.vupen.com/english/advisories/2009/1522 - http://www.securitytracker.com/id?1022346 - http://osvdb.org/54982 - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1683 State: PUBLISHED Published: 2009-06-19T16:00:00Z Last Updated: 2024-09-17T04:04:04.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service (device reset) via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://www.vupen.com/english/advisories/2009/1621 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000040.html - http://www.securityfocus.com/bid/35414 - htt
s/2009/1621 - http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000040.html - http://www.securityfocus.com/bid/35414 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://jvn.jp/en/jp/JVN87239696/index.html
CVE ID: CVE-2009-1684 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via an event handler that triggers script execution in the context of the next loaded document. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisorie
2344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://osvdb.org/54987
CVE ID: CVE-2009-1685 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML by overwriting the document.implementation property of (1) an embedded document or (2) a parent document. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english
com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.securityfocus.com/bid/35319 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://osvdb.org/54983 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1686 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068
t Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://osvdb.org/54984 - http://www.vupen.com/english/advisories/2009/1522 - http://securitytracker.com/id?1022345 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/35311 - http://su
nnounce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/35311 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1687 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer." Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54985 - http://www.ubuntu.com/usn/USN-822
itional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/54985 - http://www.ubuntu.com/usn/USN-822-1 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.securityfocus.com/bid/35309 - http://ww
redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.securityfocus.com/bid/35309 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://securitytracker.com/id?1022345 - http://secunia.com/advisories/36790 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10260 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://secunia.com/advisories/36062 - http://www.ubuntu.com/usn/USN-857-1 - http://secuni
secunia.com/advisories/35379 - http://secunia.com/advisories/36062 - http://www.ubuntu.com/usn/USN-857-1 - http://secunia.com/advisories/36057 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - http://support.apple.com/kb/HT3613 - http://www.ubuntu.com/usn/USN-836-1 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html
CVE ID: CVE-2009-1688 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to determining a security context through an approach that is not the "HTML 5 standard method." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.c
tytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securityfocus.com/bid/35320 - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://osvdb.org/54986
CVE ID: CVE-2009-1689 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving submission of a form to the about:blank URL, leading to security-context replacement. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/engli
r.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://osvdb.org/54988 - http://support.apple.com/kb/HT3613 - http://www.securityfocus.com/bid/35332
CVE ID: CVE-2009-1690 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers." Additional Analyst
d and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers." Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-822-1 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11009 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
finition/oval%3Aorg.mitre.oval%3Adef%3A11009 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://securitytracker.com/id?1022345 - http://secunia.com/advisories/36790 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secuni
.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://secunia.com/advisories/36062 - http://www.ubuntu.com/usn/USN-857-1 - http://secunia.com/advisories/36057 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - http://support.apple.com/kb/HT3613 - http://www.ubuntu.com/usn/USN-836-1 - http://osvdb.org/54990 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html
CVE ID: CVE-2009-1691 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript prototypes in other domains. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/a
m/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.securityfocus.com/bid/35330 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://osvdb.org/54989 - http://support.apple.com/kb/HT3613