9.3
CVSSv2

CVE-2009-2195

Published: 12/08/2009 Updated: 17/02/2011
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in WebKit in Apple Safari prior to 4.0.3 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple safari 1.0.0

apple safari 1.0.0b1

apple safari 1.0.3

apple safari 1.1

apple safari 1.2.3

apple safari 1.2.4

apple safari 1.3.2

apple safari 2.0

apple safari 2.0.3

apple safari 2.0.3_417.9.3

apple safari 3.0.0b

apple safari 3.0.1

apple safari 3.0.3b

apple safari 3.0.4

apple safari 4beta

apple safari 3.2

apple safari 3.1.2

apple safari

apple safari 0.9

apple safari 1.0

apple safari 1.2.1

apple safari 1.2.2

apple safari 3.0

apple safari 3.0.0

apple safari 3.0.3

apple safari 4.0

apple safari 1.0.0b2

apple safari 1.0.1

apple safari 1.0.2

apple safari 1.1.0

apple safari 1.1.1

apple safari 1.2.5

apple safari 1.3

apple safari 3.2.1

apple safari 3.2.0

apple safari 3.0.4b

apple safari 3.0.4_beta

apple safari 2.0.0

apple safari 2.0.1

apple safari 2.0.2

apple safari 2.0.4

apple safari 2.0.4_419.3

apple safari 3.0.1b

apple safari beta2

apple safari 4.0_beta

apple safari 3.1.1

apple safari 3.1.0b

apple safari 4.0.1

apple safari 0.8

apple safari 1.2

apple safari 1.2.0

apple safari 1.3.0

apple safari 1.3.1

apple safari 2.0_pre

apple safari 3

apple safari 3.0.2

apple safari 3.0.2b

apple safari 3.2.2

apple safari 3.1.0

apple safari 3.1

Exploits

source: wwwsecurityfocuscom/bid/36023/info WebKit is prone to a remote buffer-overflow vulnerability An attacker can exploit this issue to execute arbitrary code in the context of the application Failed exploit attempts will result in a denial-of-service condition Versions prior to Apple Safari 403 are vulnerable; other application ...