CVE-2009-5097
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote...
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
Exploit likelihood
What each source reports
NVD Score used
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
- Record
CVE-2009-5097- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
- Record
CVE-2009-5097- Updated
- 2026-11-02
EUVDEUVD-2009-5052 No score
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
- Record
EUVD-2009-5052- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6m4w-j5fc-2m7r No score
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote...
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
- Record
GHSA-6m4w-j5fc-2m7r- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-5097 is a high vulnerability (CVSS 7.1) in Hp Palm Pre Webos, published September 13, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.89%, the 79th percentile. No source names a fixed version.
References
kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html
securitytracker.com/id?1022987
tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html
precentral.net/webos-1-2-fixed-serious-file-security-issue
secunia.com/advisories/36936
nvd.nist.gov/vuln/detail/CVE-2009-5097
github.com/advisories/GHSA-6m4w-j5fc-2m7r