CVE-2009-1712
Summary
| CVE | CVE-2009-1712 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-06-10 18:00:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apple | Safari | 0.8 | All | mac | All |
| Application | Apple | Safari | 0.9 | All | mac | All |
| Application | Apple | Safari | 1.0 | All | mac | All |
| Application | Apple | Safari | 1.0.3 | All | mac | All |
| Application | Apple | Safari | 1.1 | All | mac | All |
| Application | Apple | Safari | 1.2 | All | mac | All |
| Application | Apple | Safari | 1.3 | All | mac | All |
| Application | Apple | Safari | 1.3.1 | All | mac | All |
| Application | Apple | Safari | 1.3.2 | All | mac | All |
| Application | Apple | Safari | 2.0 | All | mac | All |
| Application | Apple | Safari | 2.0.2 | All | mac | All |
| Application | Apple | Safari | 2.0.4 | All | mac | All |
| Application | Apple | Safari | 3.0 | All | mac | All |
| Application | Apple | Safari | 3.0 | All | windows | All |
| Application | Apple | Safari | 3.0.1 | All | windows | All |
| Application | Apple | Safari | 3.0.2 | All | windows | All |
| Application | Apple | Safari | 3.0.2 | - | mac | All |
| Application | Apple | Safari | 3.0.3 | All | mac | All |
| Application | Apple | Safari | 3.0.3 | All | windows | All |
| Application | Apple | Safari | 3.0.4 | All | mac | All |
| Application | Apple | Safari | 3.0.4 | All | windows | All |
| Application | Apple | Safari | 3.1 | All | mac | All |
| Application | Apple | Safari | 3.1 | All | windows | All |
| Application | Apple | Safari | 3.1.1 | All | mac | All |
| Application | Apple | Safari | 3.1.1 | All | windows | All |
| Application | Apple | Safari | 3.1.2 | All | mac | All |
| Application | Apple | Safari | 3.1.2 | All | windows | All |
| Application | Apple | Safari | 3.2 | - | windows | All |
| Application | Apple | Safari | 3.2.1 | All | mac | All |
| Application | Apple | Safari | 3.2.1 | All | windows | All |
| Application | Apple | Safari | 3.2.2 | All | windows | All |
| Application | Apple | Safari | 3.2.3 | All | mac | All |
| Application | Apple | Safari | All | All | windows | All |
| Application | Apple | Safari | All | All | mac | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SUSE update for Multiple Packages - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| About the security content of Safari 4.0 | af854a3a-2127-422b-91ae-364da2661108 | support.apple.com | Patch, Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| RETIRED: Apple Safari Prior to 4.0 Multiple Security Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Exploit, Patch |
| Debian -- Security Information -- DSA-1950-1 webkit | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| [security-announce] SUSE Security Summary Report: SUSE-SR:2011:002 | af854a3a-2127-422b-91ae-364da2661108 | lists.opensuse.org | |
| osvdb.org/55022 | af854a3a-2127-422b-91ae-364da2661108 | osvdb.org | |
| WebKit Java Applet Remote Code Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Debian update for webkit - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| USN-857-1: Qt vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| SecurityTracker.com Archives - Apple Safari Bugs Let Remote Users Execute Arbitrary Code | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | Patch |
| Security Alerts - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| APPLE-SA-2009-06-08-1 Safari 4.0 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | Patch, Vendor Advisory |
| Apple Safari Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Patch, Vendor Advisory |
| USN-836-1: WebKit vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.