CVE-2009-1694

Description

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a cross-site image capture issue.

Risk Information

Base Score
4.3
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
0.715

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Apple Safari 3.0.1_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0.2_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.2.2_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 0.8_macWindows
Multiple Vulnerabilities are affected in Apple Safari 0.9_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.0.3_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.0_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.1_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.2_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.3.1_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.3.2_macWindows
Multiple Vulnerabilities are affected in Apple Safari 1.3_macWindows
Multiple Vulnerabilities are affected in Apple Safari 2.0.2_macWindows
Multiple Vulnerabilities are affected in Apple Safari 2.0.4_macWindows
Multiple Vulnerabilities are affected in Apple Safari 2.0_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0.2_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0.3_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0.3_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0.4_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0.4_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.0_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.1.1_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.1.1_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.1.2_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.1.2_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.1_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.1_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.2.1_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.2.1_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 3.2.3Windows
Multiple Vulnerabilities are affected in Apple Safari 3.2.3_macWindows
Multiple Vulnerabilities are affected in Apple Safari 3.2_windowsWindows
Multiple Vulnerabilities are affected in Apple Safari 4.0_betaWindows
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 2.0.4Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 0.8Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 0.9Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 1.3.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0.3Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.0.4Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.1.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.1.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.2.2b--Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.2.1Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.2.2Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.1.0--Mac
Multiple Vulnerabilities are affected in Apple Safari for MAC 3.2.3Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)
PATCH-611604Apple Safari for MAC (MacOS Sonoma) (18.6)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234