CVEvulnerability
CVE-2009-3384
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-11-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.
Affected configurations
• apple safari (<= 4.0.3)
• apple safari 0.8
• apple safari 0.9
• apple safari 1.0
• apple safari 1.0.0
• apple safari 1.0.0b1
• apple safari 1.0.0b2
• apple safari 1.0.1
• apple safari 1.0.2
• apple safari 1.0.3
• apple safari 1.1.0
• apple safari 1.1.1
• apple safari 1.2
• apple safari 1.2.0
• apple safari 1.2.1
• apple safari 1.2.2
• apple safari 1.2.3
• apple safari 1.2.4
• apple safari 1.2.5
• apple safari 1.3
• apple safari 1.3.0
• apple safari 1.3.1
• apple safari 1.3.2
• apple safari 2
• apple safari 2.0
• apple safari 2.0.0
• apple safari 2.0.1
• apple safari 2.0.2
• apple safari 2.0.3
• apple safari 2.0.3 417.9.3
• apple safari 2.0.4
• apple safari 2.0.4 419.3
• apple safari 2.0 pre
• apple safari 3
• apple safari 3.0
• apple safari 3.0.0
• apple safari 3.0.0b
• apple safari 3.0.1
• apple safari 3.0.1b
• apple safari 3.0.2
• apple safari 3.0.2b
• apple safari 3.0.3
• apple safari 3.0.3b
• apple safari 3.0.4
• apple safari 3.0.4 beta
• apple safari 3.0.4b
• apple safari 3.1
• apple safari 3.1.0
• apple safari 3.1.0b
• apple safari 3.1.1
• apple safari 3.1.2
• apple safari 3.2
• apple safari 3.2.0
• apple safari 3.2.1
• apple safari 3.2.2
• apple safari 3.2.3
• apple safari 4.0
• apple safari 4.0.0b
• apple safari 4.0.1
• apple safari 4.0.2
References
- http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/59943 osvdb.org
- http://secunia.com/advisories/37346 Vendor Advisory
- http://secunia.com/advisories/37393 Vendor Advisory
- http://secunia.com/advisories/37397 Vendor Advisory
- http://secunia.com/advisories/43068 secunia.com
- http://support.apple.com/kb/HT3949 Patch, Vendor Advisory
- http://support.apple.com/kb/HT4013 Vendor Advisory
- http://www.securityfocus.com/bid/36995 www.securityfocus.com
- http://www.securitytracker.com/id?1023166 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/3217 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=525788 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54241 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html www.redhat.com
- http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html Patch, Vendor Advisory
- http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/59943 osvdb.org
- http://secunia.com/advisories/37346 Vendor Advisory
- http://secunia.com/advisories/37393 Vendor Advisory
- http://secunia.com/advisories/37397 Vendor Advisory
- http://secunia.com/advisories/43068 secunia.com
- http://support.apple.com/kb/HT3949 Patch, Vendor Advisory
- http://support.apple.com/kb/HT4013 Vendor Advisory
- http://www.securityfocus.com/bid/36995 www.securityfocus.com
- http://www.securitytracker.com/id?1023166 www.securitytracker.com
- http://www.vupen.com/english/advisories/2009/3217 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=525788 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54241 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6362 oval.cisecurity.org
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00545.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00549.html www.redhat.com