mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
107 lines
3.2 KiB
JSON
107 lines
3.2 KiB
JSON
{
|
|
"id": "CVE-2009-5097",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2011-09-13T19:59:25.407",
|
|
"lastModified": "2011-09-14T04:00:00.000",
|
|
"vulnStatus": "Analyzed",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Palm Pre WebOS v1.1 y anteriores procesa el JavaScript en los mensajes de correo electr\u00f3nico, lo que permite a atacantes remotos ejecutar c\u00f3digo JavaScript de su elecci\u00f3n, como lo demuestra la lectura de PalmDatabase.db3."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:M/Au:N/C:C/I:N/A:N",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "MEDIUM",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "COMPLETE",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 7.1
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 8.6,
|
|
"impactScore": 6.9,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-94"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "1.1.0",
|
|
"matchCriteriaId": "26D8E6DF-FA92-4A14-8701-8049BA053F2E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:1.0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9B50EAFC-68AC-4E87-9ADD-032C8432E6D1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:1.0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A912CC8D-70EF-4D69-96D9-899D8B91CC3C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:hp:palm_pre_webos:1.0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "07ABE032-0F75-446D-802C-8448D004DD3C"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.precentral.net/webos-1-2-fixed-serious-file-security-issue",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securitytracker.com/id?1022987",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |