GCVE - cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Safari (`7b60333a-f34d-5433-b88c-da9f1c4b350f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-3384`	vulnerable	2026-06-08 04:51:41.675994	Details available Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply. Published: 2009-11-13T15:00:00.000Z Updated: 2024-08-07T06:22:24.862Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36995 http://secunia.com/advisories/43068 http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html http://www.vupen.com/english/advisories/2009/3217 http://www.vupen.com/english/advisories/2011/0212	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2842`	vulnerable	2026-06-08 04:51:30.748317	Details available Apple Safari before 4.0.4 does not properly implement certain (1) Open Image and (2) Open Link menu options, which allows remote attackers to read local HTML files via a crafted web site. Published: 2009-11-13T15:00:00.000Z Updated: 2024-08-07T06:07:37.193Z Open on db.gcve.eu Reference links http://osvdb.org/59942 http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html http://www.vupen.com/english/advisories/2009/3217 http://support.apple.com/kb/HT3949 http://www.securitytracker.com/id?1023164	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2841`	vulnerable	2026-06-08 04:51:30.746652	Details available The HTMLMediaElement::loadResource function in html/HTMLMediaElement.cpp in WebCore in WebKit before r49480, as used in Apple Safari before 4.0.4 on Mac OS X, does not perform the expected callbacks for HTML 5 media elements that have external URLs for media resources, which allows remote attackers to trigger sub-resource requests to arbitrary web sites via a crafted HTML document, as demonstrated by an HTML e-mail message that uses a media element for X-Confirm-Reading-To functionality, aka rdar problem 7271202. Published: 2009-11-13T15:00:00.000Z Updated: 2024-08-07T06:07:37.289Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2011:039 http://www.vupen.com/english/advisories/2010/2722 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044031.html http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2010/1801	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2804`	vulnerable	2026-06-08 04:51:30.455956	Details available Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow. Published: 2009-09-14T16:00:00.000Z Updated: 2024-08-07T06:07:35.946Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html http://www.vupen.com/english/advisories/2009/3217 http://www.securityfocus.com/bid/36357 http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html http://support.apple.com/kb/HT3949	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2200`	vulnerable	2026-06-08 04:51:27.143836	Details available WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document. Published: 2009-08-12T19:00:00.000Z Updated: 2024-08-07T05:44:55.915Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43068 http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html http://www.vupen.com/english/advisories/2011/0212 http://www.securitytracker.com/id?1022720 http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2195`	vulnerable	2026-06-08 04:51:27.123531	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2072`	vulnerable	2026-06-08 04:51:26.601108	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2066`	vulnerable	2026-06-08 04:51:26.533084	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2062`	vulnerable	2026-06-08 04:51:26.473793	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0945`	vulnerable	2026-06-08 04:51:12.393609	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0162`	vulnerable	2026-06-08 04:51:07.916924	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5821`	vulnerable	2026-06-08 04:50:53.293925	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.