CVE-2009-1713

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1)…

published June 10, 2009

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02053 · 81.1th percentile
Published
2009-06-10T17:37Z
EPSS history
Timeline
  • 10 JUN 17:37Z
    The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1)…
    cvelistv5