CyberSec.Space Logo
Back to CVE Browser

CVE-2009-5097

HIGH
7.1
CVSS Severity Score
EPSS Score0.1240%
EPSS Percentile39.07th
PublishedSep 13, 2011
Last ModifiedApr 29, 2026

Vulnerability Description

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.

Affected Platforms (CPE)

💻
Hp

Palm Pre Webos

<= 1.1.0
💻
Hp

Palm Pre Webos

= 1.0.2
💻
Hp

Palm Pre Webos

= 1.0.3
💻
Hp

Palm Pre Webos

= 1.0.4

References & Advisories

🔗 http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12
🔗 http://secunia.com/advisories/36936
🔗 http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html
🔗 http://www.precentral.net/webos-1-2-fixed-serious-file-security-issue
🔗 http://www.securitytracker.com/id?1022987
🔗 http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12
🔗 http://secunia.com/advisories/36936
🔗 http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html

Related Vulnerabilities

CVE-2009-507110.0

Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact tem...

CVE-2009-50985.4

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to...

CVE-2009-049210.0

Unspecified vulnerability in SimpleIrcBot before 1.0 Stable has unknown impact and attack vectors related to an "auth vulnerabilit...

CVE-2009-227110.0

The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and ...