CVE-2009-0137

Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
applesafari
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html
http://support.apple.com/kb/HT3438
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://lists.apple.com/archives/security-announce/2009/Feb/msg00001.html
http://support.apple.com/kb/HT3438