NetSight
IP …
medium4.3Public exploit code

CVE-2009-1724

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and ot…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.

Affected products

VendorProductAffected versions
AppleSafari
through 4.0.1
Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3
AppleIphone Os
through 3.0.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1
AppleIpod Touch
All versions

Weakness classification

CWE-79

References