CVE-2009-5097

CVE-2009-5097 describes a critical vulnerability in Palm Pre WebOS 1.1 and earlier, where the email client improperly processes JavaScript. This flaw allows remote attackers to execute arbitrary JavaScript code simply by sending a malicious email, potentially enabling them to read sensitive data like PalmDatabase.db3. With a CVSS score of 7.1, this vulnerability is considered high severity due to its network-based attack vector and medium attack complexity, leading to a complete compromise of confidentiality. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.