Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1714
HistoryJun 10, 2009 - 12:00 a.m.

CVE-2009-1714

2009-06-1000:00:00
ubuntu.com
ubuntu.com
9

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

70.1%

Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in
Apple Safari before 4.0 allows user-assisted remote attackers to inject
arbitrary web script or HTML, and read local files, via vectors related to
the improper escaping of HTML attributes.

Bugs

Notes

Author Note
jdstrand webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit
mdeslaur code does not appear present in kde4libs webkit code is different in hardy-jaunty…need to test

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

70.1%