VULNERABILITY INTELLIGENCE
CVE-2009-1712
CVSS score9.3 HIGH
EPSS probability7.75%
CISA KEVNot currently listed
Published2009-06-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Patch
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Exploit, Patch
- cve@mitre.org