CVE-2009-1691: XSS
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to insufficient access control for standard JavaScript prototypes in other domains.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1691?
CVE-2009-1691 is classified as a high severity cross-site scripting vulnerability.
How do I fix CVE-2009-1691?
To fix CVE-2009-1691, users should upgrade to the latest version of Apple Safari that addresses this vulnerability.
Which versions of Safari are affected by CVE-2009-1691?
Affected versions of Safari include all versions prior to 4.0 on both Mac and Windows.
What type of vulnerability is CVE-2009-1691?
CVE-2009-1691 is a cross-site scripting (XSS) vulnerability.
Can CVE-2009-1691 be exploited by remote attackers?
Yes, CVE-2009-1691 can be exploited by remote attackers to inject arbitrary web script or HTML.