CVE-2009-0917

Name: CVE-2009-0917
Creator: NVD / NIST
Published: 2009-03-16T19:30:00.563+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.54%

Last modified Jun 16, 2026

CVE-2009-0917 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK. NOTE: the vendor states that the product is intended for use in a laboratory with "no contact from / to internet.". EPSS estimates a 1.54% chance of exploitation in the next 30 days.

Description

Cross-site scripting (XSS) vulnerability in DFLabs PTK 1.0.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML by providing a forensic image containing HTML documents, which are rendered in web browsers during inspection by PTK. NOTE: the vendor states that the product is intended for use in a laboratory with "no contact from / to internet."

Metrics

EPSS Probability

1.54%

71.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Dflabs	Ptk	1.0.0
Dflabs	Ptk	1.0.1
Dflabs	Ptk	1.0.2
Dflabs	Ptk	1.0.3
Dflabs	Ptk	1.0.4

References

http://ptk.dflabs.com/faq.htmlPatch, Vendor Advisory
http://ptk.dflabs.com/security.htmlPatch, Vendor Advisory
http://secunia.com/advisories/34257
http://www.kb.cert.org/vuls/id/845747US Government Resource
http://www.kb.cert.org/vuls/id/RGII-7Q4GBJUS Government Resource
http://www.securityfocus.com/bid/34111
https://exchange.xforce.ibmcloud.com/vulnerabilities/49236
http://ptk.dflabs.com/faq.htmlPatch, Vendor Advisory
http://ptk.dflabs.com/security.htmlPatch, Vendor Advisory
http://secunia.com/advisories/34257
http://www.kb.cert.org/vuls/id/845747US Government Resource
http://www.kb.cert.org/vuls/id/RGII-7Q4GBJUS Government Resource
http://www.securityfocus.com/bid/34111
https://exchange.xforce.ibmcloud.com/vulnerabilities/49236

Timeline

Published: Mar 16, 2009
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2009-0917?

How severe is CVE-2009-0917?

Severity scoring for CVE-2009-0917 is pending analysis. The EPSS model estimates a 1.54% probability of exploitation in the next 30 days.

How do I fix CVE-2009-0917?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-0917?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST