Published: 10/06/2009 Updated: 17/08/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

WebKit in Apple Safari prior to 4.0 does not properly initialize memory for Attr DOM objects, which allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple safari 3.1.1
apple safari 3.1
apple safari 1.3.1
apple safari 1.3.2
apple safari 3.0.2
apple safari 0.9
apple safari 1.2
apple safari 1.3
apple safari 3.2.3
apple safari
apple safari 3.1.2
apple safari 0.8
apple safari 2.0
apple safari 2.0.2
apple safari 3.0.3
apple safari 3.0
apple safari 3.0.4
apple safari 1.0
apple safari 1.1
apple safari 2.0.4
apple safari 3.2.1
apple safari 1.0.3
apple safari 3.0.1
apple safari 3.2
apple safari 3.2.2

Several vulnerabilities have been discovered in WebKit, a Web content engine library for Gtk+ The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0945 Array index error in the insertItemBefore method in WebKit, allows remote attackers to execute arbitrary code via a document with a SVGPathList data structu ...

It was discovered that WebKit did not properly handle certain SVGPathList data structures If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program (CVE-2009-0945) ...

It was discovered that QtWebKit did not properly handle certain SVGPathList data structures If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program (CVE-2009-0945) ...

Debian Bug report logs - #534946 webkit: CVE-2009-1698 CVE-2009-1690 CVE-2009-1687 Package: webkit; Maintainer for webkit is (unknown); Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Sun, 28 Jun 2009 12:48:02 UTC Severity: grave Tags: lenny, patch, security Found in version 101-4 Fixed in versions 115-1, ...

Debian Bug report logs - #545793 CVE-2009-2700: QSslCertificate incorrect verification of SSL certificate with NUL in subjectAltName Package: qt4-x11; Maintainer for qt4-x11 is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Wed, 9 Sep 2009 08:00 ...

Debian Bug report logs - #535793 webkit: deluge of security vulnerabilities Package: webkit; Maintainer for webkit is (unknown); Reported by: Michael S Gilbert <michaelsgilbert@gmailcom> Date: Sun, 5 Jul 2009 05:18:04 UTC Severity: grave Tags: fixed-upstream, security Found in version 101-4 Fixed in version 1121-1 ...

CVE-2009-1711

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect