WebKit Preflight Request Same-Origin Policy Bypass Vulnerability
BID:36997
Info
WebKit Preflight Request Same-Origin Policy Bypass Vulnerability
| Bugtraq ID: | 36997 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-2816 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 11 2009 12:00AM |
| Updated: | Apr 13 2015 10:10PM |
| Credit: | Apple |
| Vulnerable: |
WebKit Open Source Project WebKit 0 Pardus Linux 2009 0 Google Chrome 3.0.195 .32 Google Chrome 3.0.195 .24 Google Chrome 3.0.195 .21 Google Chrome 2.0.172 .43 Google Chrome 2.0.172 .37 Google Chrome 2.0.172 .33 Google Chrome 2.0.172 .31 Google Chrome 2.0.172 .30 Google Chrome 1.0.154 .61 Google Chrome 1.0.154.65 Google Chrome 1.0.154.64 Google Chrome 1.0.154.59 Google Chrome 1.0.154.55 Google Chrome 1.0.154.53 Google Chrome 1.0.154.48 Google Chrome 1.0.154.46 Google Chrome 1.0.154.36 Apple Safari For Windows 3.2.1 Apple Safari 4.0.3 for Windows Apple Safari 4.0.3 Apple Safari 4.0.2 for Windows Apple Safari 4.0.2 Apple Safari 4.0.1 Apple Safari 3.2.3 for Windows Apple Safari 3.2.3 Apple Safari 3.2.2 for Windows Apple Safari 3.1.2 for Windows Apple Safari 3.1.2 Apple Safari 3.1.1 for Windows Apple Safari 3.1.1 Apple Safari 3.0.4 Beta for Windows Apple Safari 3.0.3 Beta for Windows Apple Safari 3.0.3 Beta Apple Safari 3.0.2 Beta for Windows Apple Safari 3.0.2 Beta Apple Safari 3.0.1 Beta for Windows Apple Safari 3.0.1 Beta Apple Safari 4 for Windows Apple Safari 4 Beta Apple Safari 4 Apple Safari 3.2 Apple Safari 3.1 for Windows Apple Safari 3.1 Apple Safari 3 Beta for Windows Apple Safari 3 Beta Apple iPod Touch 3.1.3 Apple iPod Touch 3.1.2 Apple iPod Touch 3.1.1 Apple iPod Touch 2.2.1 Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 3.0 Apple iPod Touch 2.2 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPhone 3.1.3 Apple iPhone 3.1.2 Apple iPhone 3.0.1 Apple iPhone 2.2.1 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 3.1 Apple iPhone 3.0 Apple iPhone 2.2 Apple iPhone 2.1 Apple iPhone 2.0 |
| Not Vulnerable: |
Google Chrome 3.0.195 .33 Apple Safari 4.0.4 for Windows Apple Safari 4.0.4 Apple iOS 4 |
Discussion
WebKit Preflight Request Same-Origin Policy Bypass Vulnerability
WebKit is prone to a vulnerability that lets attackers bypass the same-origin policy.
Attackers can exploit this issue to access resources from another origin in the context of another domain. This can facilitate cross-site request-forgery attacks.
WebKit is prone to a vulnerability that lets attackers bypass the same-origin policy.
Attackers can exploit this issue to access resources from another origin in the context of another domain. This can facilitate cross-site request-forgery attacks.
Exploit / POC
WebKit Preflight Request Same-Origin Policy Bypass Vulnerability
To exploit this issue, an attacker must entice a victim into visiting a malicious webpage.
To exploit this issue, an attacker must entice a victim into visiting a malicious webpage.
Solution / Fix
WebKit Preflight Request Same-Origin Policy Bypass Vulnerability
Solution:
Updates are available. Please see the references for details.
Apple Safari 4.0.3 for Windows
Apple Safari 4.0.3
Solution:
Updates are available. Please see the references for details.
Apple Safari 4.0.3 for Windows
-
Apple APPLE-SA-2009-11-11-1 SafariQuickTimeSetup.exe
Safari+QuickTime for Windows 7, Vista or XP
http://www.apple.com/safari/download/ -
Apple APPLE-SA-2009-11-11-1 SafariSetup.exe
Safari for Windows 7, Vista or XP
http://www.apple.com/safari/download/
Apple Safari 4.0.3
-
Apple Safari4.0.4Leopard.dmg
Safari for Mac OS X v10.5.7
http://www.apple.com/safari/download/ -
Apple Safari4.0.4SnowLeopard.dmg
Safari for Mac OS X v10.6.1 and v10.6.2
http://www.apple.com/safari/download/ -
Apple Safari4.0.4Tiger.dmg
Safari for Mac OS X v10.4.11
http://www.apple.com/safari/download/
References
WebKit Preflight Request Same-Origin Policy Bypass Vulnerability
References:
References:
- Safari Homepage (Apple)
- Stable Update: Fix Google Chrome not Starting (Google)