CVE-2009-1713

Published: 10 June 2009

The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.

Status

Notes

webkit is a fork of khtml from kdelibs. kdelibs5 is farther from
it, while qt4-x11 attempts to unify khtml and webkit

code does not appear present in kde4libs

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1713
• https://usn.ubuntu.com/usn/usn-857-1
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=535793