Bug 284136 (CVE-2009-1700)

Summary:	[TRACKER] WebKit XSLT Redirect File Disclosure (CVE-2009-1700)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	Keywords:	Tracker
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1700
Whiteboard:	B4 [ebuild]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2009-09-08 11:04:09 UTC

CVE-2009-1700 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1700):
  The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone
  OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1
  does not properly handle redirects, which allows remote attackers to
  read XML content from arbitrary web pages via a crafted document.

Comment 1 Chris Reffett (RETIRED) gentoo-dev

2013-09-12 22:08:58 UTC

Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.