CVE-2009-2195

EPSS 13.29%
Veröffentlicht 12.08.2009 19:30:00
Zuletzt bearbeitet 16.06.2026 23:08:58
Erkennungen
Login

Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 12

NVD 73 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Safari Version <= 4.0.2

   Apple ≫ macOS X Version 10.4.
   Apple ≫ macOS X Version 10.5.7
   Apple ≫ macOS X Version 10.5.8
   Apple ≫ macOS X Server Version 10.4.11
   Apple ≫ macOS X Server Version 10.5.7
   Apple ≫ macOS X Server Version 10.5.8
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Xp

Apple ≫ Safari Version 0.8

Apple ≫ Safari Version 0.9

Apple ≫ Safari Version 1.0

Apple ≫ Safari Version 1.0 Update beta

Apple ≫ Safari Version 1.0 Update beta2

Apple ≫ Safari Version 1.0.0

Apple ≫ Safari Version 1.0.0b1

Apple ≫ Safari Version 1.0.0b2

Apple ≫ Safari Version 1.0.1

Apple ≫ Safari Version 1.0.2

Apple ≫ Safari Version 1.0.3

Apple ≫ Safari Version 1.0.3 Update 85.8

Apple ≫ Safari Version 1.0.3 Update 85.8.1

Apple ≫ Safari Version 1.1

Apple ≫ Safari Version 1.1.0

Apple ≫ Safari Version 1.1.1

Apple ≫ Safari Version 1.2

Apple ≫ Safari Version 1.2.0

Apple ≫ Safari Version 1.2.1

Apple ≫ Safari Version 1.2.2

Apple ≫ Safari Version 1.2.3

Apple ≫ Safari Version 1.2.4

Apple ≫ Safari Version 1.2.5

Apple ≫ Safari Version 1.3

Apple ≫ Safari Version 1.3.0

Apple ≫ Safari Version 1.3.1

Apple ≫ Safari Version 1.3.2

Apple ≫ Safari Version 1.3.2 Update 312.5

Apple ≫ Safari Version 1.3.2 Update 312.6

Apple ≫ Safari Version 2.0

Apple ≫ Safari Version 2.0.0

Apple ≫ Safari Version 2.0.1

Apple ≫ Safari Version 2.0.2

Apple ≫ Safari Version 2.0.3

Apple ≫ Safari Version 2.0.3 Update 417.8

Apple ≫ Safari Version 2.0.3 Update 417.9

Apple ≫ Safari Version 2.0.3 Update 417.9.2

Apple ≫ Safari Version 2.0.3 Update 417.9.3

Apple ≫ Safari Version 2.0.3_417.9.3

Apple ≫ Safari Version 2.0.4

Apple ≫ Safari Version 2.0.4_419.3

Apple ≫ Safari Version 2.0_pre

Apple ≫ Safari Version 3

Apple ≫ Safari Version 3.0

Apple ≫ Safari Version 3.0.0

Apple ≫ Safari Version 3.0.0b

Apple ≫ Safari Version 3.0.1

Apple ≫ Safari Version 3.0.1 Update beta

Apple ≫ Safari Version 3.0.1b

Apple ≫ Safari Version 3.0.2

Apple ≫ Safari Version 3.0.2b

Apple ≫ Safari Version 3.0.3

Apple ≫ Safari Version 3.0.3 Update 522.15.5

Apple ≫ Safari Version 3.0.3b

Apple ≫ Safari Version 3.0.4

Apple ≫ Safari Version 3.0.4_beta

Apple ≫ Safari Version 3.0.4b

Apple ≫ Safari Version 3.1

Apple ≫ Safari Version 3.1.0

Apple ≫ Safari Version 3.1.0b

Apple ≫ Safari Version 3.1.1

Apple ≫ Safari Version 3.1.2

Apple ≫ Safari Version 3.2

Apple ≫ Safari Version 3.2.0

Apple ≫ Safari Version 3.2.1

Apple ≫ Safari Version 3.2.2

Apple ≫ Safari Version 4.0

Apple ≫ Safari Version 4.0 Update beta

Apple ≫ Safari Version 4.0.1

Apple ≫ Safari Version 4.0_beta Update 528.16

Apple ≫ Safari Version 4beta

Apple ≫ Safari Version beta2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	13.29%	0.959

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

http://secunia.com/advisories/43068

http://www.vupen.com/english/advisories/2011/0212

http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html

http://support.apple.com/kb/HT4225

http://lists.apple.com/archives/security-announce/2009/Aug/msg00002.html

Patch

Vendor Advisory

http://support.apple.com/kb/HT3733

Patch

Vendor Advisory

http://www.securitytracker.com/id?1022717

http://www.securityfocus.com/bid/36023

Patch

https://nvd.nist.gov/vuln/detail/CVE-2009-2195

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-2195

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-2195

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-2195