CVE-2009-1699

Publication date 10 June 2009

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an "XXE attack."

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
qt4-x11	11.04 natty	Not affected
	10.10 maverick	Not affected
	10.04 LTS lucid	Not affected
	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.10 intrepid	Fixed 4.4.3-0ubuntu1.4
	8.04 LTS hardy	Not affected
	6.06 LTS dapper	Not affected
webkit	11.04 natty	Not affected
	10.10 maverick	Not affected
	10.04 LTS lucid	Not affected
	9.10 karmic	Not affected
	9.04 jaunty	Not affected
	8.10 intrepid	Not affected
	8.04 LTS hardy	Ignored
	6.06 LTS dapper	Not in release

Notes

jdstrand

webkit is a fork of khtml from kdelibs. kdelibs5 is farther from it, while qt4-x11 attempts to unify khtml and webkit

mdeslaur

PoC: http://scary.beasts.org/security/CESA-2009-006.html PoC: http://www.milw0rm.com/exploits/8907 code doesn't seem present in kde4libs

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
webkit	Upstream: http://trac.webkit.org/changeset/34534

Severity score breakdown

Parameter	Value
Base score	7.5 · High
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	None
Availability impact	None
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Related Ubuntu Security Notices (USN)

USN-857-1
Qt vulnerabilities
10 November 2009