GCVE - cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:safari:1.3:-:mac:*:*:*:*:*

part: a version: 1.3 update: -

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Safari (`7b60333a-f34d-5433-b88c-da9f1c4b350f`)
Edition	mac
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-3455`	vulnerable	2026-06-08 04:51:42.088012	Details available Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. Published: 2009-09-29T17:00:00.000Z Updated: 2024-09-16T19:36:40.318Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36477 http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1716`	vulnerable	2026-06-08 04:51:24.558738	Details available CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files. Published: 2009-06-10T17:37:00.000Z Updated: 2024-08-07T05:20:35.236Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://www.securityfocus.com/bid/35260 http://www.vupen.com/english/advisories/2009/1522 http://secunia.com/advisories/35379 http://support.apple.com/kb/HT3613	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1714`	vulnerable	2026-06-08 04:51:24.556506	Details available Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes. Published: 2009-06-10T17:37:00.000Z Updated: 2024-08-07T05:20:35.163Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/35348 http://securitytracker.com/id?1022344 http://secunia.com/advisories/43068 https://exchange.xforce.ibmcloud.com/vulnerabilities/51268 http://www.vupen.com/english/advisories/2011/0212	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1710`	vulnerable	2026-06-08 04:51:24.551819	Details available WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property. Published: 2009-06-10T17:37:00.000Z Updated: 2024-08-07T05:20:35.193Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2011/0212 http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html https://exchange.xforce.ibmcloud.com/vulnerabilities/51263 http://www.securityfocus.com/bid/35340	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1709`	vulnerable	2026-06-08 04:51:24.550594	Details available Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches." Published: 2009-06-10T17:37:00.000Z Updated: 2024-08-07T05:20:35.242Z Open on db.gcve.eu Reference links http://www.zerodayinitiative.com/advisories/ZDI-09-034/ http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2011/0212 http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://www.securityfocus.com/bid/35260	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1708`	vulnerable	2026-06-08 04:51:24.549377	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1693`	vulnerable	2026-06-08 04:51:24.475571	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1691`	vulnerable	2026-06-08 04:51:24.473356	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1689`	vulnerable	2026-06-08 04:51:24.432027	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1686`	vulnerable	2026-06-08 04:51:24.428173	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1682`	vulnerable	2026-06-08 04:51:24.410034	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.