Bug 284119 (CVE-2009-1689)

Summary:	[TRACKER] WebKit about:blank XSS (CVE-2009-1689)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	Keywords:	Tracker
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1689
Whiteboard:	B4 [ebuild]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2009-09-08 11:02:50 UTC

CVE-2009-1689 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1689):
  Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari
  before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod
  touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary
  web script or HTML via vectors involving submission of a form to the
  about:blank URL, leading to security-context replacement.

Comment 1 Chris Reffett (RETIRED) gentoo-dev

2013-09-12 22:11:47 UTC

Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.