CVE-2009-1699

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an "XXE attack."

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

7.1 HIGHAV:N/AC:M/Au:N/C:C/I:N/A:N

EPSS

29.10% chance of exploitation in the next 30 days, 98th percentile

Published

2009-06-10

Updated

2024-08-07

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/8907

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33034

References

• CVE Record
• NVD entry

Related

• CVE-2009-1692
• CVE-2009-1724
• CVE-2009-1684
• CVE-2009-1729
• CVE-2009-1678
• CVE-2009-1730