Vulnerabilities > Apple > Safari > 2.0.pre

DATE CVE VULNERABILITY TITLE RISK
2009-11-13 CVE-2009-3384 Unspecified vulnerability in Apple Safari
Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.
network
apple microsoft
critical
9.3
2009-11-13 CVE-2009-2841 Unspecified vulnerability in Apple Safari
The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202.
network
low complexity
apple
5.0
2009-09-14 CVE-2009-2804 Numeric Errors vulnerability in Apple mac OS X, mac OS X Server and Safari
Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow.
6.8
2009-08-12 CVE-2009-2200 Information Exposure vulnerability in Apple Safari
WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document.
7.1
2009-08-12 CVE-2009-2195 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Apple Safari
Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.
network
apple microsoft CWE-119
critical
9.3
2009-06-15 CVE-2009-2072 Improper Authentication vulnerability in Apple Safari
Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server.
5.4
2009-06-15 CVE-2009-2066 Improper Authentication vulnerability in Apple Safari
Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."
network
apple CWE-287
6.8
2009-06-15 CVE-2009-2062 Improper Authentication vulnerability in Apple Safari
Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.
network
apple CWE-287
6.8
2008-11-17 CVE-2008-4216 Information Exposure vulnerability in Apple Safari
The plug-in interface in WebKit in Apple Safari before 3.2 does not prevent plug-ins from accessing local URLs, which allows remote attackers to obtain sensitive information via vectors that "launch local files."
network
apple CWE-200
4.3
2008-11-17 CVE-2008-3644 Information Exposure vulnerability in Apple Safari
Apple Safari before 3.2 does not properly prevent caching of form data for form fields that have autocomplete disabled, which allows local users to obtain sensitive information by reading the browser's page cache.
local
apple CWE-200
1.9