Unscored CVE-2009-0137 EUVD-2009-0146GHSA-8www-x27c-37fg

Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers t…

Published Feb 13, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."

References

APPLE-SA-2009-02-12 vendor-advisory
http://support.apple.com/kb/HT3438
APPLE-SA-2009-02-12 vendor-advisory