CVE-2009-1724

描述

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.

如何修補 CVE-2009-1724

目前尚未發布修補版本。可考慮移除受影響套件,或參考下方連結中的上游建議。

• Debian/kde4libs—未列出修補版本

CVE-2009-1724 正在被利用嗎?

中等 — EPSS 為 6.2%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0

參考連結(14)

• ADVISORYsecunia.com/advisories/35758
• ADVISORYsecunia.com/advisories/36677
• ADVISORYsecunia.com/advisories/43068
• ADVISORYwww.vupen.com/english/advisories/2009/1827
• ADVISORYwww.vupen.com/english/advisories/2011/0212