CVE-2009-2199

Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs.

• http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.htmlPatch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• http://secunia.com/advisories/36677Vendor Advisory
• http://secunia.com/advisories/43068Vendor Advisory
• http://support.apple.com/kb/HT3733Patch, Vendor Advisory
• http://support.apple.com/kb/HT3860
• http://www.securityfocus.com/bid/36026Patch
• http://www.securitytracker.com/id?1022719
• http://www.vupen.com/english/advisories/2011/0212Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.htmlPatch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
• http://secunia.com/advisories/36677Vendor Advisory
• http://secunia.com/advisories/43068Vendor Advisory
• http://support.apple.com/kb/HT3733Patch, Vendor Advisory
• http://support.apple.com/kb/HT3860
• http://www.securityfocus.com/bid/36026Patch
• http://www.securitytracker.com/id?1022719
• http://www.vupen.com/english/advisories/2011/0212Vendor Advisory

Published

Aug 12, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-2193Buffer overflow in the kernel in Apple Mac OS X 10.5 before …
• CVE-2009-2194Apple Mac OS X 10.5 before 10.5.8 does not properly share fi…
• CVE-2009-2195Buffer overflow in WebKit in Apple Safari before 4.0.3 allow…
• CVE-2009-2196Unspecified vulnerability in Apple Safari 4 before 4.0.3 all…
• CVE-2009-2197Apple Safari before 9.1 allows remote attackers to spoof the…
• CVE-2009-2198Apple GarageBand before 5.1 reconfigures Safari to accept al…
• CVE-2009-2200WebKit in Apple Safari before 4.0.3 does not properly restri…
• CVE-2009-2201The screensharing feature in the Admin application in Apple …
• CVE-2009-2202Apple QuickTime before 7.6.4 allows remote attackers to exec…
• CVE-2009-2203Buffer overflow in Apple QuickTime before 7.6.4 allows remot…
• CVE-2009-2204Unspecified vulnerability in the CoreTelephony component in …
• CVE-2009-2205Stack-based buffer overflow in the Java Web Start command la…