Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1725
HistoryJul 09, 2009 - 5:30 p.m.

CVE-2009-1725

2009-07-0917:30:00
CWE-189
[email protected]
web.nvd.nist.gov
4

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.039

Percentile

92.0%

JSON

WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected configurations

Nvd
Node
applesafariRange≤4.0.1
OR
applesafariMatch2.0
OR
applesafariMatch2.0.0
OR
applesafariMatch2.0.1
OR
applesafariMatch2.0.2
OR
applesafariMatch2.0.3
OR
applesafariMatch2.0.3417.8
OR
applesafariMatch2.0.3417.9
OR
applesafariMatch2.0.3417.9.2
OR
applesafariMatch2.0.3417.9.3
OR
applesafariMatch2.0.4
OR
applesafariMatch3.0
OR
applesafariMatch3.0.0
OR
applesafariMatch3.0.0b
OR
applesafariMatch3.0.1
OR
applesafariMatch3.0.1beta
OR
applesafariMatch3.0.1b
OR
applesafariMatch3.0.2
OR
applesafariMatch3.0.2b
OR
applesafariMatch3.0.3
OR
applesafariMatch3.0.3b
OR
applesafariMatch3.0.4
OR
applesafariMatch3.0.4b
OR
applesafariMatch3.1.0
OR
applesafariMatch3.1.0b
OR
applesafariMatch3.1.1
OR
applesafariMatch3.1.2
OR
applesafariMatch3.2.0
OR
applesafariMatch3.2.1
OR
applesafariMatch3.2.2
OR
applesafariMatch4.0
OR
applesafariMatch4.0.0b
Node
appleiphone_osRange≤3.0.1
OR
appleiphone_osMatch1.0.0
OR
appleiphone_osMatch1.0.1
OR
appleiphone_osMatch1.0.2
OR
appleiphone_osMatch1.1.0
OR
appleiphone_osMatch1.1.1
OR
appleiphone_osMatch1.1.2
OR
appleiphone_osMatch1.1.3
OR
appleiphone_osMatch1.1.4
OR
appleiphone_osMatch1.1.5
OR
appleiphone_osMatch2.0
OR
appleiphone_osMatch2.0.0
OR
appleiphone_osMatch2.0.1
OR
appleiphone_osMatch2.0.2
OR
appleiphone_osMatch2.1
OR
appleiphone_osMatch2.1.1
OR
appleiphone_osMatch2.2
OR
appleiphone_osMatch2.2.1
OR
appleiphone_osMatch3.0
AND
appleiphone_os
Node
appleiphone_osRange≤3.1
OR
appleiphone_osMatch1.0.0
OR
appleiphone_osMatch1.0.1
OR
appleiphone_osMatch1.0.2
OR
appleiphone_osMatch1.1.0
OR
appleiphone_osMatch1.1.1
OR
appleiphone_osMatch1.1.2
OR
appleiphone_osMatch1.1.3
OR
appleiphone_osMatch1.1.4
OR
appleiphone_osMatch1.1.5
OR
appleiphone_osMatch2.0
OR
appleiphone_osMatch2.0.0
OR
appleiphone_osMatch2.0.1
OR
appleiphone_osMatch2.0.2
OR
appleiphone_osMatch2.1
OR
appleiphone_osMatch2.1.1
OR
appleiphone_osMatch2.2
OR
appleiphone_osMatch2.2.1
OR
appleiphone_osMatch3.0
OR
appleiphone_osMatch3.0.1
AND
appleipod_touch
VendorProductVersionCPE
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
applesafari2.0cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*
applesafari2.0.0cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*
applesafari2.0.1cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*
applesafari2.0.2cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*
applesafari2.0.3cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*
applesafari2.0.3cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*
applesafari2.0.3cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*
applesafari2.0.3cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*
applesafari2.0.3cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*
Rows per page:
1-10 of 531

References

Related

nessus 21
openvas 42
prion 1
fedora 17
cve 1
debiancve 1
ubuntucve 1
cvelist 1
ubuntu 2
debian 3
osv 2
nessus
nessus
Fedora 10 : qt-4.5.2-2.fc10 (2009-8802)
2009-08-24 00:00:00
openSUSE Security Update : kdelibs4 (openSUSE-SU-2010:1036-1)
2011-05-05 00:00:00
Fedora 11 : qt-4.5.2-2.fc11 (2009-8800)
2009-08-24 00:00:00
openvas
openvas
Fedora Core 10 FEDORA-2009-8802 (qt)
2009-09-02 00:00:00
Fedora Core 11 FEDORA-2009-8800 (qt)
2009-09-02 00:00:00
Fedora Core 10 FEDORA-2009-8802 (qt)
2009-09-02 00:00:00
prion
prion
Memory corruption
2009-07-09 17:30:00
fedora
fedora
[SECURITY] Fedora 11 Update: qt-4.5.2-2.fc11
2009-08-20 21:00:54
[SECURITY] Fedora 10 Update: qt-4.5.2-2.fc10
2009-08-20 21:01:34
[SECURITY] Fedora 11 Update: qt-4.5.2-3.fc11
2009-09-03 00:29:02
cve
cve
CVE-2009-1725
2009-07-09 17:30:00
debiancve
debiancve
CVE-2009-1725
2009-07-09 17:30:00
ubuntucve
ubuntucve
CVE-2009-1725
2009-07-09 00:00:00
cvelist
cvelist
CVE-2009-1725
2009-07-09 17:00:00
ubuntu
ubuntu
WebKit vulnerabilities
2009-09-23 00:00:00
Qt vulnerabilities
2009-11-10 00:00:00
debian
debian
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
2010-02-02 22:44:05
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
2010-02-02 22:44:05
[SECURITY] [DSA-1950-1] New webkit packages fix several vulnerabilities
2009-12-12 10:10:15
osv
osv
qt4-x11 - several vulnerabilities
2010-02-02 00:00:00
webkit - several vulnerabilities
2009-12-12 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

High

EPSS

0.039

Percentile

92.0%

JSON
Related for NVD:CVE-2009-1725
nessus21openvas42prion1fedora17cve1debiancve1ubuntucve1cvelist1ubuntu2debian3osv2