QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-0153

Back to search

CVE-2009-0153

Published: May 13, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2009-1621
vdb-entry
x_refsource_VUPEN
APPLE-SA-2009-06-08-1
vendor-advisory
x_refsource_APPLE
RHSA-2009:1122
vendor-advisory
x_refsource_REDHAT
35074
third-party-advisory
x_refsource_SECUNIA
macos-icu-security-bypass(50488)
vdb-entry
x_refsource_XF
ADV-2009-1522
vdb-entry
x_refsource_VUPEN
34974
vdb-entry
x_refsource_BID
APPLE-SA-2009-06-17-1
vendor-advisory
x_refsource_APPLE
APPLE-SA-2009-05-12
vendor-advisory
x_refsource_APPLE
FEDORA-2009-6121
vendor-advisory
x_refsource_FEDORA
35379
third-party-advisory
x_refsource_SECUNIA
34926
vdb-entry
x_refsource_BID
35498
third-party-advisory
x_refsource_SECUNIA
TA09-133A
third-party-advisory
x_refsource_CERT
35584
third-party-advisory
x_refsource_SECUNIA
ADV-2009-1297
vdb-entry
x_refsource_VUPEN
35436
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-6273
vendor-advisory
x_refsource_FEDORA
oval:org.mitre.oval:def:11366
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now