GCVE - cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*

part: a version: 3.0.3 update: 522.15.5

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Safari (`7b60333a-f34d-5433-b88c-da9f1c4b350f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2200`	vulnerable	2026-06-08 04:51:27.143671	Details available WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document. Published: 2009-08-12T19:00:00.000Z Updated: 2024-08-07T05:44:55.915Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43068 http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html http://www.vupen.com/english/advisories/2011/0212 http://www.securitytracker.com/id?1022720 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2195`	vulnerable	2026-06-08 04:51:27.123352	Details available Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers. Published: 2009-08-12T19:00:00.000Z Updated: 2024-08-07T05:44:55.286Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43068 http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html http://www.vupen.com/english/advisories/2011/0212 http://support.apple.com/kb/HT4225 http://www.securityfocus.com/bid/36023	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2072`	vulnerable	2026-06-08 04:51:26.600942	Details available Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server. Published: 2009-06-15T19:00:00.000Z Updated: 2024-08-07T05:36:20.444Z Open on db.gcve.eu Reference links http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf http://www.securityfocus.com/bid/35411 http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2066`	vulnerable	2026-06-08 04:51:26.532909	Details available Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages." Published: 2009-06-15T19:00:00.000Z Updated: 2024-08-07T05:36:20.463Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35403 http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/51187 http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2062`	vulnerable	2026-06-08 04:51:26.470901	Details available Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site. Published: 2009-06-15T19:00:00.000Z Updated: 2024-08-07T05:36:20.578Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/51202 http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf http://www.securityfocus.com/bid/35412 http://research.microsoft.com/apps/pubs/default.aspx?id=79323	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3623`	vulnerable	2026-06-08 04:50:35.669795	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.