First published: Wed Jun 10 2009(Updated: )
WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Safari | =1.1 | |
Safari | =1.3.1 | |
Safari | =3.2.3 | |
Safari | =2.0.2 | |
Safari | =3.1 | |
Safari | =3.1.2 | |
Safari | =3.0 | |
Safari | =0.8 | |
Safari | =2.0 | |
Safari | =3.0.4 | |
Safari | =0.9 | |
Safari | =3.0.3 | |
Safari | =1.3.2 | |
Safari | =1.2 | |
Safari | <=4.0_beta | |
Safari | =3.2.1 | |
Safari | =3.0.2 | |
Safari | =2.0.4 | |
Safari | =3.1.1 | |
Safari | =1.0.3 | |
Safari | =1.0 | |
Safari | =1.3 | |
Safari | =3.2 | |
Safari | =3.0.1 | |
Safari | =3.1.2 | |
Safari | <=3.2.3 | |
Safari | =3.0.3 | |
Safari | =3.0.2 | |
Safari | =3.1.1 | |
Safari | =3.0 | |
Safari | =3.1 | |
Safari | =3.2.2 | |
Safari | =3.2.1 | |
Safari | =3.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-1703 has been classified as a vulnerability that could lead to information disclosure.
To mitigate CVE-2009-1703, users should upgrade to Apple Safari version 4.0 or later.
CVE-2009-1703 affects multiple versions of Apple Safari, including all versions prior to 4.0.
CVE-2009-1703 allows attackers to determine the existence of arbitrary files on a victim's system through crafted HTML documents.
CVE-2009-1703 affects Apple Safari running on both macOS and Windows operating systems.