Bug 284148 (CVE-2009-1713)

Summary:	[TRACKER] WebKit XSLT document function File disclosure (CVE-2009-1713)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor	Keywords:	Tracker
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1713
Whiteboard:	B4 [ebuild]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2009-09-08 11:05:06 UTC

CVE-2009-1713 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1713):
  The XSLT functionality in WebKit in Apple Safari before 4.0 does not
  properly implement the document function, which allows remote
  attackers to read (1) arbitrary local files and (2) files from
  different security zones via unspecified vectors.

Comment 1 Chris Reffett (RETIRED) gentoo-dev

2013-09-12 22:09:58 UTC

Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.