CVE-2009-5097
hp palm pre webos: no CVSS score yet. EPSS 1.9% chance of exploitation in the next 30 days.
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3.
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:palm_pre_webos
References
- http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12
- http://secunia.com/advisories/36936
- http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-11-remote-file-access.html
- http://www.precentral.net/webos-1-2-fixed-serious-file-security-issue
- http://www.securitytracker.com/id?1022987