CVE-2009-1702: XSS
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1702?
CVE-2009-1702 has a high severity level due to its potential to allow remote attackers to execute arbitrary web scripts on affected devices.
How do I fix CVE-2009-1702?
To fix CVE-2009-1702, users should update to the latest version of Apple Safari or the affected Apple iPhone OS.
Which versions are affected by CVE-2009-1702?
CVE-2009-1702 affects Apple Safari versions earlier than 4.0, as well as iPhone OS versions from 1.0 to 2.2.1.
What type of vulnerability is CVE-2009-1702?
CVE-2009-1702 is a cross-site scripting (XSS) vulnerability stemming from improper handling of Location and History objects in WebKit.
Can CVE-2009-1702 lead to data theft?
Yes, CVE-2009-1702 can enable attackers to execute scripts that may lead to data theft due to the XSS nature of the vulnerability.