XXE in Apple Iphone OS
CVE-2009-1699
The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an "XXE attack."
Vulnerability class: XXE (XML External Entity)
EPSS: 0.291 (98.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Apple Iphone_os
- Apple Safari
- Canonical Ubuntu_linux — versions 8.10, 9.04
- Opensuse — versions 11.2, 11.3
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN)
- cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_VUPEN)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_APPLE, Patch, Mailing List, Broken Link, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (Patch, vdb-entry, Broken Link, x_refsource_VUPEN, Vendor Advisory)
Frequently asked questions
- What is CVE-2009-1699?
- CVE-2009-1699 is a high-severity vulnerability in Apple Iphone OS, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 7.5/10. Published 2009-06-10.
- How severe is CVE-2009-1699?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2009-1699 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.