← back
CVE-2009-1713

CVE-2009-1713

EPSS 2.1%
The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://osvdb.org/54975http://secunia.com/advisories/35379http://secunia.com/advisories/43068https://exchange.xforce.ibmcloud.com/vulnerabilities/51267http://support.apple.com/kb/HT3613http://www.securityfocus.com/bid/35260http://www.ubuntu.com/usn/USN-857-1http://www.vupen.com/english/advisories/2009/1522http://www.vupen.com/english/advisories/2011/0212