PT-2009-4180 · Apple · Ios+3

Chris Evans · Published 2009-06-10 · Updated 2022-08-09 · CVE-2009-1700

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0 iPhone OS versions prior to 2.2.1 iPhone OS for iPod touch versions prior to 2.2.1

Description: The XSLT implementation in WebKit does not properly handle redirects, allowing remote attackers to read XML content from arbitrary web pages via a crafted document.

Recommendations: For Apple Safari versions prior to 4.0, update to version 4.0 or later. For iPhone OS versions prior to 2.2.1, update to version 2.2.1 or later. For iPhone OS for iPod touch versions prior to 2.2.1, update to version 2.2.1 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-1700

Affected Products

Safari

Webkit

Ios

Iphone Os For Ipod Touch

References · 15

• 🔥 http://securityfocus.com/bid/35260 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1700 · Security Note
• https://osv.dev/vulnerability/CVE-2009-1700 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1522 · Vendor Advisory
• http://support.apple.com/kb/HT3613 · Vendor Advisory
• http://secunia.com/advisories/35379 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Vendor Advisory
• http://osvdb.org/54973 · Note
• https://t.me/cvenotify/34425 · Telegram Post
• http://vupen.com/english/advisories/2011/0212 · Note
• http://support.apple.com/kb/HT3639 · Note
• http://secunia.com/advisories/43068 · Note
• http://vupen.com/english/advisories/2009/1621 · Note