CVE-2009-2420 in Safari

Resumen (Inglés)

Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2009-07-09

Divulgación

2009-07-09

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
48949	Apple Safari Protocol escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2009-2420

Fuentes

• MITRE
• NVD
• CVE Details