CVE-2009-0137: Input Validation
Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0137?
CVE-2009-0137 is considered a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2009-0137?
To address CVE-2009-0137, update your version of Safari or apply the security patches provided by Apple.
Which systems are affected by CVE-2009-0137?
CVE-2009-0137 affects Safari RSS on Apple Mac OS X 10.4.11, 10.5.6, and Windows XP and Vista.
What types of attacks can CVE-2009-0137 enable?
CVE-2009-0137 can enable remote attackers to execute arbitrary JavaScript in the local security zone.
Is CVE-2009-0137 resolved in later software updates?
Yes, CVE-2009-0137 is resolved in later versions of Safari that include necessary security updates.