CVE-2009-2842
Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site.
- Affected products
- Safari
- Apple Safari
- ≤ 4.0.3, 1.0, 1.0.0, 1.0.0b1, 1.0.0b2, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.0, 1.1.1, 1.2, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.3, 1.3.0, 1.3.1, 1.3.2, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 3.0, 3.0.0, 3.0.0b, 3.0.1, 3.0.1b, 3.0.2, 3.0.2b, 3.0.3, 3.0.3b, 3.0.4, 3.0.4b, 3.1.0, 3.1.0b
- CVSS 2.0
- 4.3 MEDIUM
- EPSS
- 1.8% (76th percentile)
- NVD status
- Modified
- Published
- 2009-11-13
CVE-2009-2842 at NVD
1 known exploit for CVE-2009-2842
Proof-of-concept code and exploit modules indexed by Sploitus