Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-3272
HistorySep 21, 2009 - 7:30 p.m.

CVE-2009-3272

2009-09-2119:30:00
Debian Security Bug Tracker
security-tracker.debian.org
5

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.6 Medium

EPSS

Percentile

97.8%

Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences.

OSVersionArchitecturePackageVersionFilename
Debian10allkde4libs<= 4:4.14.38-3kde4libs_4:4.14.38-3_all.deb
Debian10allqt4-x11<= 4:4.8.7+dfsg-18+deb10u1qt4-x11_4:4.8.7+dfsg-18+deb10u1_all.deb

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.6 Medium

EPSS

Percentile

97.8%