← Back

CVE-2009-0162

nvd nist
Published: May 13, 2009Modified: Apr 23, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL.

Affected (55)

Products: Apple: Safari
1 product
Safari
Configuration A
55 vulnerable · 15 platform
Vulnerable SoftwareAffected Versions
Apple
Up to 3.2.2
Version 0.8
Version 0.9
Version 1.0.0
Version 1.0.0b1
Version 1.0.0b2
Version 1.0.1
Version 1.0.2
Version 1.0.3
Version 1.0.3 85.8.1
Version 1.0.3 85.8
Version 1.0
Version 1.0 beta2
Version 1.0 beta
Version 1.1.0
Version 1.1.1
Version 1.1
Version 1.2.0
Version 1.2.1
Version 1.2.2
Version 1.2.3
Version 1.2.4
Version 1.2.5
Version 1.2
Version 1.3.0
Version 1.3.1
Version 1.3.2
Version 1.3.2 312.5
Version 1.3.2 312.6
Version 1.3
Version 2.0.0
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0.3 417.8
Version 2.0.3 417.9.2
Version 2.0.3 417.9
Version 2.0.4
Version 2.0
Version 2
Version 3.0.0
Version 3.0.1
Version 3.0.2
Version 3.0.3
Version 3.0.4
Version 3.0
Version 3.1.0
Version 3.1.1
Version 3.1.2
Version 3.1
Version 3.2.0
Version 3.2.1
Version 3.2
Version 3
Version 4.0 beta
Running on/withPlatform Versions
Apple
Mac Os X
Version 10.5.0
Apple
Mac Os X
Version 10.5.1
Apple
Mac Os X
Version 10.5.2
Apple
Mac Os X
Version 10.5.3
Apple
Mac Os X
Version 10.5.4
Apple
Mac Os X
Version 10.5.5
Apple
Mac Os X
Version 10.5.6
Apple
Mac Os X Server
Version 10.5.0
Apple
Mac Os X Server
Version 10.5.1
Apple
Mac Os X Server
Version 10.5.2
Apple
Mac Os X Server
Version 10.5.3
Apple
Mac Os X Server
Version 10.5.4
Apple
Mac Os X Server
Version 10.5.6
Microsoft
Windows Vista
All versions
Microsoft
Windows Xp
All versions

References (26)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.