9.3

CVE-2009-1701

Exploit

EPSS 9.72%
Veröffentlicht 10.06.2009 18:00:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 19

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 3.2.2

Apple ≫ Safari Version2.0

Apple ≫ Safari Version2.0.0

Apple ≫ Safari Version2.0.1

Apple ≫ Safari Version2.0.2

Apple ≫ Safari Version2.0.3

Apple ≫ Safari Version2.0.3 Update417.8

Apple ≫ Safari Version2.0.3 Update417.9

Apple ≫ Safari Version2.0.3 Update417.9.2

Apple ≫ Safari Version2.0.3 Update417.9.3

Apple ≫ Safari Version2.0.4

Apple ≫ Safari Version3.0

Apple ≫ Safari Version3.0.0

Apple ≫ Safari Version3.0.0b

Apple ≫ Safari Version3.0.1

Apple ≫ Safari Version3.0.1 Updatebeta

Apple ≫ Safari Version3.0.1b

Apple ≫ Safari Version3.0.2

Apple ≫ Safari Version3.0.2b

Apple ≫ Safari Version3.0.3

Apple ≫ Safari Version3.0.3b

Apple ≫ Safari Version3.0.4

Apple ≫ Safari Version3.0.4b

Apple ≫ Safari Version3.1.0

Apple ≫ Safari Version3.1.0b

Apple ≫ Safari Version3.1.1

Apple ≫ Safari Version3.1.2

Apple ≫ Safari Version3.2.0

Apple ≫ Safari Version3.2.1

Apple ≫ iPhone OS Version1.0.0

Apple ≫ iPhone OS Version1.0.1

Apple ≫ iPhone OS Version1.0.2

Apple ≫ iPhone OS Version1.1.0

Apple ≫ iPhone OS Version1.1.1

Apple ≫ iPhone OS Version1.1.2

Apple ≫ iPhone OS Version1.1.3

Apple ≫ iPhone OS Version1.1.4

Apple ≫ iPhone OS Version1.1.5

Apple ≫ iPhone OS Version2.0

Apple ≫ iPhone OS Version2.0.0

Apple ≫ iPhone OS Version2.0.1

Apple ≫ iPhone OS Version2.0.2

Apple ≫ iPhone OS Version2.1

Apple ≫ iPhone OS Version2.1.1

Apple ≫ iPhone OS Version2.2

Apple ≫ iPhone OS Version2.2.1

Apple ≫ Ipod Touch

Apple ≫ iPhone OS

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	9.72%	0.926

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html

Patch

Vendor Advisory

http://secunia.com/advisories/35379

Vendor Advisory

http://support.apple.com/kb/HT3613

Patch

Vendor Advisory

http://www.vupen.com/english/advisories/2009/1522

Patch

Vendor Advisory

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

http://support.apple.com/kb/HT3639

http://www.vupen.com/english/advisories/2009/1621

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/43068

http://www.vupen.com/english/advisories/2011/0212

http://www.securityfocus.com/bid/35260

Exploit

http://securitytracker.com/id?1022345

Patch

http://osvdb.org/55008

http://www.securityfocus.com/archive/1/504172/100/0/threaded

http://www.securityfocus.com/bid/35325

http://www.zerodayinitiative.com/advisories/ZDI-09-033/

Patch

https://nvd.nist.gov/vuln/detail/CVE-2009-1701

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1701

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1701

EUVD