high7.1
CVE-2009-5097
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by readin…
Impact
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Palm Pre Webos | through 1.1.0 Versions 1.0.2, 1.0.3, 1.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12
- http://secunia.com/advisories/36936
- http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html
- http://www.precentral.net/webos-1-2-fixed-serious-file-security-issue
- http://www.securitytracker.com/id?1022987
- http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12
- http://secunia.com/advisories/36936
- http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html
- http://www.precentral.net/webos-1-2-fixed-serious-file-security-issue
- http://www.securitytracker.com/id?1022987