GCVE - cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*

part: a version: beta2 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Safari (`7b60333a-f34d-5433-b88c-da9f1c4b350f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2200`	vulnerable	2026-06-08 04:51:27.143980	Details available WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document. Published: 2009-08-12T19:00:00.000Z Updated: 2024-08-07T05:44:55.915Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43068 http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html http://www.vupen.com/english/advisories/2011/0212 http://www.securitytracker.com/id?1022720 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2195`	vulnerable	2026-06-08 04:51:27.133137	Details available Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers. Published: 2009-08-12T19:00:00.000Z Updated: 2024-08-07T05:44:55.286Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43068 http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html http://www.vupen.com/english/advisories/2011/0212 http://support.apple.com/kb/HT4225 http://www.securityfocus.com/bid/36023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1552`	vulnerable	2026-06-08 04:48:57.468813	Details available Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom". Published: 2006-03-31T11:00:00.000Z Updated: 2024-08-07T17:19:49.115Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17951 http://www.vupen.com/english/advisories/2006/1779 http://www.osvdb.org/25597 http://www.us-cert.gov/cas/techalerts/TA06-132A.html http://www.securityfocus.com/bid/17321	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1314`	vulnerable	2026-06-08 04:47:53.583338	Details available Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different vulnerability than CVE-2004-1122. Published: 2004-12-22T05:00:00.000Z Updated: 2024-08-08T00:46:12.301Z Open on db.gcve.eu Reference links http://secunia.com/advisories/13252/ http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html http://secunia.com/multiple_browsers_window_injection_vulnerability_test/ http://secunia.com/secunia_research/2004-13/advisory/ https://exchange.xforce.ibmcloud.com/vulnerabilities/18397	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1199`	vulnerable	2026-06-08 04:47:53.323085	Details available Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays. Published: 2004-12-15T05:00:00.000Z Updated: 2024-08-08T00:46:11.513Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/18282 http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html http://www.securityfocus.com/bid/11759	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0361`	not_vulnerable	2026-06-08 04:47:49.504625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.