CVE-2008-4216

Published: Nov 17, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive information via vectors that "launch local files."

Affected (42)

Products: Apple: Safari

Apple

1 product

Safari

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	Up to 3.1.2
Apple Safari	All versions
Apple Safari	Version 0.8
Apple Safari	Version 0.9
Apple Safari	Version 1.0.3
Apple Safari	Version 1.0
Apple Safari	Version 1.0 beta2
Apple Safari	Version 1.0 beta
Apple Safari	Version 1.1.1
Apple Safari	Version 1.1
Apple Safari	Version 1.2.1
Apple Safari	Version 1.2.2
Apple Safari	Version 1.2.3
Apple Safari	Version 1.2.4
Apple Safari	Version 1.2.5
Apple Safari	Version 1.2
Apple Safari	Version 1.3.1
Apple Safari	Version 1.3.2
Apple Safari	Version 1.3
Apple Safari	Version 2.0.1
Apple Safari	Version 2.0.2
Apple Safari	Version 2.0.3
Apple Safari	Version 2.0.3_417.9.3
Apple Safari	Version 2.0.4
Apple Safari	Version 2.0.4_419.3
Apple Safari	Version 2.0
Apple Safari	Version 2.0_pre
Apple Safari	Version 2
Apple Safari	Version 3.0.1
Apple Safari	Version 3.0.1
Apple Safari	Version 3.0.2
Apple Safari	Version 3.0.2
Apple Safari	Version 3.0.3
Apple Safari	Version 3.0.3
Apple Safari	Version 3.0.4
Apple Safari	Version 3.0.4_beta
Apple Safari	Version 3.0.4_beta
Apple Safari	Version 3.0
Apple Safari	Version 3.0
Apple Safari	Version 3.1.1
Apple Safari	Version 3.1
Apple Safari	Version 3