CVE-2009-0162: XSS
Published May 13, 2009
·Updated
Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL.
Affected Software
70 affected components
Apple iOS and macOS=10.5.0
Apple iOS and macOS=10.5.1
Apple iOS and macOS=10.5.2
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.4
Apple iOS and macOS=10.5.5
Apple iOS and macOS=10.5.6
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.2
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple Mac OS X Server=10.5.6
Microsoft Windows Vista
Microsoft Windows XP
Apple Safari<=3.2.2
Apple Safari=0.8
Apple Safari=0.9
Apple Safari=1.0
Apple Safari=1.0-beta
Apple Safari=1.0-beta2
Apple Safari=1.0.0
Apple Safari=1.0.0b1
Apple Safari=1.0.0b2
Apple Safari=1.0.1
Apple Safari=1.0.2
Apple Safari=1.0.3
Apple Safari=1.0.3-85.8
Apple Safari=1.0.3-85.8.1
Apple Safari=1.1
Apple Safari=1.1.0
Apple Safari=1.1.1
Apple Safari=1.2
Apple Safari=1.2.0
Apple Safari=1.2.1
Apple Safari=1.2.2
Apple Safari=1.2.3
Apple Safari=1.2.4
Apple Safari=1.2.5
Apple Safari=1.3
Apple Safari=1.3.0
Apple Safari=1.3.1
Apple Safari=1.3.2
Apple Safari=1.3.2-312.5
Apple Safari=1.3.2-312.6
Apple Safari=2
Apple Safari=2.0
Apple Safari=2.0.0
Apple Safari=2.0.1
Apple Safari=2.0.2
Apple Safari=2.0.3
Apple Safari=2.0.3-417.8
Apple Safari=2.0.3-417.9
Apple Safari=2.0.3-417.9.2
Apple Safari=2.0.4
Apple Safari=3
Apple Safari=3.0
Apple Safari=3.0.0
Apple Safari=3.0.1
Apple Safari=3.0.2
Apple Safari=3.0.3
Apple Safari=3.0.4
Apple Safari=3.1
Apple Safari=3.1.0
Apple Safari=3.1.1
Apple Safari=3.1.2
Apple Safari=3.2
Apple Safari=3.2.0
Apple Safari=3.2.1
Apple Safari=4.0-beta
Remediation
Patch Available
Event History
May 13, 2009
CVE Published
via MITRE·03:14 PM
Data Sourced
via MITRE·03:14 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0162?
CVE-2009-0162 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2009-0162?
To fix CVE-2009-0162, update Safari to version 3.2.3 or later for affected devices.
3
What systems are affected by CVE-2009-0162?
CVE-2009-0162 affects Safari versions prior to 3.2.3 on Mac OS X 10.5 before 10.5.7 and Windows systems.
4
What type of vulnerability is CVE-2009-0162?
CVE-2009-0162 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2009-0162 be exploited remotely?
Yes, CVE-2009-0162 can be exploited remotely by attackers through crafted feed URLs.