CVE-2009-1712

Publication date 10 June 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.

Read the notes from the security team

Status

Package Ubuntu Release Status

Notes

jdstrand

webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit

mdeslaur

code does not appear present in kde4libs

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details

References

Related Ubuntu Security Notices (USN)

    • USN-836-1
    • WebKit vulnerabilities
    • 23 September 2009
    • USN-857-1
    • Qt vulnerabilities
    • 10 November 2009

Other references