CVE-2009-2200

CVE-2009-2200 describes a vulnerability in Apple Safari before version 4.0.3, affecting various Apple and Microsoft operating systems. This flaw allows user-assisted remote attackers to launch arbitrary local files and potentially obtain sensitive information due to improper URL scheme restrictions in the pluginspage attribute of an EMBED element. With a CVSS score of 7.1, it is a high-severity vulnerability requiring user interaction and medium attack complexity, leading to a complete compromise of confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.