CVE-2009-1714: XSS
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1714?
The severity of CVE-2009-1714 is considered medium due to its potential impact on user data through cross-site scripting.
How do I fix CVE-2009-1714?
To fix CVE-2009-1714, update your Apple Safari browser to version 4.0 or later.
What vulnerabilities does CVE-2009-1714 exploit?
CVE-2009-1714 exploits cross-site scripting vulnerabilities that arise from improper escaping of HTML attributes.
Which versions of Safari are affected by CVE-2009-1714?
CVE-2009-1714 affects multiple versions of Apple Safari prior to 4.0, including versions from 0.8 to 3.2.3.
Can CVE-2009-1714 allow unauthorized access to local files?
Yes, CVE-2009-1714 can allow remote attackers to inject scripts that may read local files.