CVE-2009-1699

HIGH 7.5CVE-2009-1699 · Published 10/06/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
safari apple	`< 4.0`	`4.0`

Description

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an "XXE attack."

References

lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Mailing List
lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Broken Link
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html · Mailing List
osvdb.org/54972 · Broken Link
scary.beasts.org/security/CESA-2009-006.html · Exploit
scarybeastsecurity.blogspot.com/2009/06/apples-safari-4-fixes-local-file-theft.html · Exploit
secunia.com/advisories/35379 · Broken Link
secunia.com/advisories/43068 · Broken Link
support.apple.com/kb/HT3613 · Patch
support.apple.com/kb/HT3639 · Vendor Advisory
securityfocus.com/bid/35260 · Broken Link
securityfocus.com/bid/35321 · Broken Link
ubuntu.com/usn/USN-857-1 · Third Party Advisory
vupen.com/english/advisories/2009/1522 · Broken Link
vupen.com/english/advisories/2009/1621 · Broken Link
vupen.com/english/advisories/2011/0212 · Broken Link
exploit-db.com/exploits/8907 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free