CVE-2009-2842: Medium severity safari vulnerability
Published Nov 13, 2009
·Updated
Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site.
Affected Software
59 affected components
Safari=4.0.2
Safari=3.0.4b
Safari=1.3.0
Safari=1.0.3-85.8
Safari=2.0.3-417.9.3
Safari=4.0.1
Safari=1.3.2
Safari=1.1.1
Safari=3.0.4
Safari=1.2.2
Safari=3.0.1-beta
Safari=2.0.1
Safari=2.0.3
Safari=1.0.3
Safari=2.0.2
Safari=1.0.2
Safari=3.0.0
Safari=3.0.1
Safari=3.0.2
Safari=1.0
Safari=3.0.3b
Safari=3.1.1
Safari=1.3
Safari=2.0.3-417.9
Safari=1.2.5
Safari=2.0.3-417.9.2
Safari=3.2
Safari=3.0.3
Safari=1.2.4
Safari=1.0.1
Safari=2.0.3-417.8
Safari=3.1.2
Safari=1.2.1
Safari=3.1.0b
Safari=1.0.3-85.8.1
Safari=3.1.0
Safari=2.0.4
Safari=1.1
Safari=1.3.2-312.5
Safari=3.2.2
Safari=3.0.0b
Safari=1.3.1
Safari=4.0.0b
Safari=2.0.0
Safari=3.2.0
Safari=1.1.0
Safari=3.0.2b
Safari=1.2
Safari=1.2.0
Safari=3.0.1b
Safari=1.0.0b1
Safari=3.2.1
Safari=3.2.3
Safari=3.0
Safari<=4.0.3
Safari=1.0.0
Safari=1.2.3
Safari=1.3.2-312.6
Safari=1.0.0b2
Remediation
Patch Available
Event History
Nov 13, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2842?
CVE-2009-2842 is rated as a moderate severity vulnerability allowing unauthorized access to local HTML files.
2
How do I fix CVE-2009-2842?
To fix CVE-2009-2842, upgrade Apple Safari to version 4.0.4 or later.
3
What versions of Safari are affected by CVE-2009-2842?
CVE-2009-2842 affects multiple versions of Safari, including 4.0.2, 4.0.1, and earlier versions down to 1.0.
4
How does CVE-2009-2842 exploit occur?
Exploitation of CVE-2009-2842 occurs when a user visits a specially crafted website that can access local HTML files.
5
Are there any workarounds for CVE-2009-2842?
A potential workaround for CVE-2009-2842 is to disable the Open Image and Open Link features in Safari settings.