PT-2009-6698 · Apple+1 · Safari+1
Publicado
1970-01-01
·
Atualizado
2017-08-17
·
CVE-2009-1712
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari version 4.0 and earlier
Debian GNU/Linux (affected versions not specified)
Description
The issue allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information. Multiple vulnerabilities in various packages of Debian GNU/Linux can lead to a breach of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations
For Apple Safari version 4.0 and earlier, update to version 4.0 or later to resolve the issue.
For Debian GNU/Linux, since the affected versions are not specified, it is recommended to check for and apply any available updates to ensure the system is secure.
As a temporary workaround, consider restricting access to vulnerable components until a patch is available.
Avoid using vulnerable functions or parameters in affected API endpoints until the issue is resolved.
Exploit
Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Safari
Debian