VULNERABILITY INTELLIGENCE
CVE-2009-1713
CVSS score7.1 HIGH
EPSS probability2.05%
CISA KEVNot currently listed
Published2009-06-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:N/A:N
Description
The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory