Intrusion PreventionApple.Safari.XSL.File.XXE
Description
This indicates an attack attempt against an information-disclosure vulnerability in Safari.
The vulnerability is caused by an error when the vulnerable software handles a malicious XSL file. It allows a remote attacker to steal files via sending a crafted web page.
Affected Products
Apple Safari Prior 4.0
Impact
Information disclosure
Recommended Actions
Apply the latest update from the vendor.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2024-02-14 | 26.733 | Name:Apple. Safari. XSL. File. Stealing:Apple. Safari. XSL. File. XXE |
| 2021-01-11 | 16.995 |
| ID | 17651 |
| Created | Aug 27, 2009 |
| Updated | Feb 13, 2024 |
| Risk |
|
| CVE ID | CVE-2009-1699 |
| Exploit Prediction Score | 3.1% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, MacOS |
| Affected App | Apple |