Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-0162
HistoryMay 13, 2009 - 3:30 p.m.

CVE-2009-0162

2009-05-1315:30:00
CWE-79
mitre
web.nvd.nist.gov
37
cve-2009-0162
xss
safari
mac os x
windows
remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.008

Percentile

81.2%

JSON

Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL.

Affected configurations

Nvd
Node
applemac_os_xMatch10.5.0
OR
applemac_os_xMatch10.5.1
OR
applemac_os_xMatch10.5.2
OR
applemac_os_xMatch10.5.3
OR
applemac_os_xMatch10.5.4
OR
applemac_os_xMatch10.5.5
OR
applemac_os_xMatch10.5.6
OR
applemac_os_x_serverMatch10.5.0
OR
applemac_os_x_serverMatch10.5.1
OR
applemac_os_x_serverMatch10.5.2
OR
applemac_os_x_serverMatch10.5.3
OR
applemac_os_x_serverMatch10.5.4
OR
applemac_os_x_serverMatch10.5.6
OR
microsoftwindows_vista
OR
microsoftwindows_xp
AND
applesafariRange≤3.2.2
OR
applesafariMatch0.8
OR
applesafariMatch0.9
OR
applesafariMatch1.0
OR
applesafariMatch1.0beta
OR
applesafariMatch1.0beta2
OR
applesafariMatch1.0.0
OR
applesafariMatch1.0.0b1
OR
applesafariMatch1.0.0b2
OR
applesafariMatch1.0.1
OR
applesafariMatch1.0.2
OR
applesafariMatch1.0.3
OR
applesafariMatch1.0.385.8
OR
applesafariMatch1.0.385.8.1
OR
applesafariMatch1.1
OR
applesafariMatch1.1.0
OR
applesafariMatch1.1.1
OR
applesafariMatch1.2
OR
applesafariMatch1.2.0
OR
applesafariMatch1.2.1
OR
applesafariMatch1.2.2
OR
applesafariMatch1.2.3
OR
applesafariMatch1.2.4
OR
applesafariMatch1.2.5
OR
applesafariMatch1.3
OR
applesafariMatch1.3.0
OR
applesafariMatch1.3.1
OR
applesafariMatch1.3.2
OR
applesafariMatch1.3.2312.5
OR
applesafariMatch1.3.2312.6
OR
applesafariMatch2
OR
applesafariMatch2.0
OR
applesafariMatch2.0.0
OR
applesafariMatch2.0.1
OR
applesafariMatch2.0.2
OR
applesafariMatch2.0.3
OR
applesafariMatch2.0.3417.8
OR
applesafariMatch2.0.3417.9
OR
applesafariMatch2.0.3417.9.2
OR
applesafariMatch2.0.4
OR
applesafariMatch3
OR
applesafariMatch3.0
OR
applesafariMatch3.0.0
OR
applesafariMatch3.0.1
OR
applesafariMatch3.0.2
OR
applesafariMatch3.0.3
OR
applesafariMatch3.0.4
OR
applesafariMatch3.1
OR
applesafariMatch3.1.0
OR
applesafariMatch3.1.1
OR
applesafariMatch3.1.2
OR
applesafariMatch3.2
OR
applesafariMatch3.2.0
OR
applesafariMatch3.2.1
OR
applesafariMatch4.0beta
VendorProductVersionCPE
applemac_os_x10.5.0cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*
applemac_os_x10.5.1cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
applemac_os_x10.5.2cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
applemac_os_x10.5.3cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*
applemac_os_x10.5.4cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*
applemac_os_x10.5.5cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*
applemac_os_x10.5.6cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*
applemac_os_x_server10.5.0cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*
applemac_os_x_server10.5.1cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*
applemac_os_x_server10.5.2cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 701

Related

openvas 4
nvd 1
prion 1
exploitdb 1
cvelist 1
nessus 3
securityvulns 2
openvas
openvas
Apple Safari Multiple Vulnerabilities
2009-06-02 00:00:00
Apple Safari Multiple Vulnerabilities
2009-06-02 00:00:00
Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002
2010-05-12 00:00:00
nvd
nvd
CVE-2009-0162
2009-05-13 15:30:00
prion
prion
Cross site scripting
2009-05-13 15:30:00
exploitdb
exploitdb
Apple Safari 3.2.2 - 'feed:' URI Multiple Input Validation Vulnerabilities
2009-05-12 00:00:00
cvelist
cvelist
CVE-2009-0162
2009-05-13 15:14:00
nessus
nessus
Safari < 3.2.3 Multiple Vulnerabilities
2004-08-18 00:00:00
Safari < 3.2.3 Multiple Vulnerabilities
2009-05-13 00:00:00
Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities
2009-05-13 00:00:00
securityvulns
securityvulns
Apple Mac OS X multiple security vulnerabilities
2009-05-29 00:00:00
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.1

Confidence

High

EPSS

0.008

Percentile

81.2%

JSON
Related for CVE-2009-0162
openvas4nvd1prion1exploitdb1cvelist1nessus3securityvulns2