CVE-2009-1690

2009-06-1014:30:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2009-1690

use-after-free vulnerability

webkit

apple safari

iphone os

ipod touch

google chrome

arbitrary code execution

denial of service

memory corruption

application crash

dom event handlers

html error

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.0%

JSON

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to “recursion in certain DOM event handlers.”

CPENameOperatorVersion
apple:safariapple safarieq1.1
apple:safariapple safarieq1.3.1
apple:safariapple safarieq3.2.3
apple:safariapple safarieq2.0.2
apple:safariapple safarieq3.1
apple:safariapple safarieq3.1.2
apple:safariapple safarieq3.0
apple:safariapple safarieq0.8
apple:safariapple safarieq2.0
apple:safariapple safarieq3.0.4

CPE	Name	Operator	Version
apple:safari	apple safari	eq	1.1
apple:safari	apple safari	eq	1.3.1
apple:safari	apple safari	eq	3.2.3
apple:safari	apple safari	eq	2.0.2
apple:safari	apple safari	eq	3.1
apple:safari	apple safari	eq	3.1.2
apple:safari	apple safari	eq	3.0
apple:safari	apple safari	eq	0.8
apple:safari	apple safari	eq	2.0
apple:safari	apple safari	eq	3.0.4