CVE-2009-1700
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and...
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
Exploit likelihood
What each source reports
NVD Score used
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
- Record
CVE-2009-1700- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
- Record
CVE-2009-1700- Updated
- 2026-11-02
EUVDEUVD-2009-1695 No score
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
- Record
EUVD-2009-1695- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4hwh-c92m-9mrx No score
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and...
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
- Record
GHSA-4hwh-c92m-9mrx- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
- Record
CVE-2009-1700- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1700 is a medium vulnerability (CVSS 4.3) in Apple Iphone Os, published June 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. No source names a fixed version.
References
support.apple.com/kb/HT3639
secunia.com/advisories/43068
vupen.com/english/advisories/2009/1621
lists.apple.com/archives/security-announce/2009/jun/msg00002.html
securityfocus.com/bid/35260
Show 8 moreShow less
osvdb.org/54973
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
nvd.nist.gov/vuln/detail/CVE-2009-1700
github.com/advisories/GHSA-4hwh-c92m-9mrx