CVE-2009-2841: Medium severity safari vulnerability
A security flaw was found in the way WebKit used to handle media elements (audio and video tags). A remote attacker could provide a specially-crafted document, requesting loading of sub-resources (such as remote URLs), which would be normally disallowed by the callback function(s).
Upstream patch: --------------- http://trac.webkit.org/changeset/49480
Other sources
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2841?
CVE-2009-2841 has been classified as a medium severity vulnerability.
How do I fix CVE-2009-2841?
To fix CVE-2009-2841, update to the latest version of the affected Safari browser.
Which versions of Safari are affected by CVE-2009-2841?
CVE-2009-2841 affects several versions of Safari including all versions prior to 4.0.3.
What type of vulnerability is CVE-2009-2841?
CVE-2009-2841 is a security flaw related to improper handling of media elements in WebKit.
Can CVE-2009-2841 be exploited remotely?
Yes, CVE-2009-2841 can be exploited remotely by a malicious actor through specially-crafted documents.