CVE-2009-0162
MEDIUM 4.3EPSS 5.4%
Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL.
- CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 5.35% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2009-05-13
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://lists.apple.com/archives/security-announce/2009/May/msg00000.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00001.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://support.apple.com/kb/HT3549
- http://www.securityfocus.com/bid/34925