PT-2016-1605

CVE-2009-2197

·

Published

2016-03-24

·

Updated

2017-03-24

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 9.1
Description The issue is related to incorrect data handling. It may allow a remote attacker to substitute the user interface by using a web page that places text in a crafted context, leading to unintended use of that text within a Safari dialog.
Recommendations For Apple Safari versions prior to 9.1, update to version 9.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted web pages that may exploit this issue until a patch is applied.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾