Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1711
HistoryJun 10, 2009 - 6:00 p.m.

CVE-2009-1711

2009-06-1018:00:00
CWE-399
[email protected]
web.nvd.nist.gov
39
webkit
apple safari
cve-2009-1711
memory initialization
dom objects
remote code execution
denial of service
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

JSON

WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.

Affected configurations

NVD
Node
applesafariRange≤4.0_betamac
OR
applesafariMatch0.8mac
OR
applesafariMatch0.9mac
OR
applesafariMatch1.0mac
OR
applesafariMatch1.0.3mac
OR
applesafariMatch1.1mac
OR
applesafariMatch1.2mac
OR
applesafariMatch1.3mac
OR
applesafariMatch1.3.1mac
OR
applesafariMatch1.3.2mac
OR
applesafariMatch2.0mac
OR
applesafariMatch2.0.2mac
OR
applesafariMatch2.0.4mac
OR
applesafariMatch3.0mac
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.3mac
OR
applesafariMatch3.0.4mac
OR
applesafariMatch3.1mac
OR
applesafariMatch3.1.1mac
OR
applesafariMatch3.1.2mac
OR
applesafariMatch3.2.1mac
OR
applesafariMatch3.2.3mac
Node
applesafariRange≤3.2.3windows
OR
applesafariMatch3.0windows
OR
applesafariMatch3.0.1windows
OR
applesafariMatch3.0.2windows
OR
applesafariMatch3.0.3windows
OR
applesafariMatch3.0.4windows
OR
applesafariMatch3.1windows
OR
applesafariMatch3.1.1windows
OR
applesafariMatch3.1.2windows
OR
applesafariMatch3.2windows
OR
applesafariMatch3.2.1windows
OR
applesafariMatch3.2.2windows

Related

ubuntucve 1
prion 1
cvelist 1
nvd 1
debiancve 1
ubuntu 2
nessus 8
openvas 8
debian 3
osv 2
seebug 1
ubuntucve
ubuntucve
CVE-2009-1711
2009-06-10 00:00:00
prion
prion
Hardcoded credentials
2009-06-10 18:00:00
cvelist
cvelist
CVE-2009-1711
2009-06-10 17:37:00
nvd
nvd
CVE-2009-1711
2009-06-10 18:00:00
debiancve
debiancve
CVE-2009-1711
2009-06-10 18:00:00
ubuntu
ubuntu
WebKit vulnerabilities
2009-09-23 00:00:00
Qt vulnerabilities
2009-11-10 00:00:00
nessus
nessus
Ubuntu 8.10 / 9.04 : webkit vulnerabilities (USN-836-1)
2009-09-24 00:00:00
Ubuntu 8.10 / 9.04 : qt4-x11 vulnerabilities (USN-857-1)
2009-11-11 00:00:00
Debian DSA-1988-1 : qt4-x11 - several vulnerabilities
2010-02-24 00:00:00
openvas
openvas
Ubuntu USN-836-1 (webkit)
2009-09-28 00:00:00
Ubuntu: Security Advisory (USN-836-1)
2009-09-28 00:00:00
Ubuntu: Security Advisory (USN-857-1)
2009-11-11 00:00:00
debian
debian
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
2010-02-02 22:44:05
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
2010-02-02 22:44:05
[SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities
2009-12-12 10:10:15
osv
osv
qt4-x11 - several vulnerabilities
2010-02-02 00:00:00
webkit - several vulnerabilities
2009-12-12 00:00:00
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.0%

JSON
Related for CVE-2009-1711
ubuntucve1prion1cvelist1nvd1debiancve1ubuntu2nessus8openvas8debian3osv2seebug1