CVE-2009-1724

Description

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6208

http://www.vupen.com/english/advisories/2011/0212

http://www.vupen.com/english/advisories/2009/1827

http://www.securitytracker.com/id?1022525

http://support.apple.com/kb/HT3860

http://support.apple.com/kb/HT3666

http://secunia.com/advisories/43068

http://secunia.com/advisories/36677

http://secunia.com/advisories/35758

http://osvdb.org/55738

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html

http://lists.apple.com/archives/security-announce/2009/Jul/msg00000.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3