CVE-2009-1690 — Out-of-bounds Write in Apple Safari

CWE-3998 documents6 sources
Severity
9.3CRITICALNVD
EPSS
8.5%
top 7.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple SafariApple Iphone OSGoogle Chrome
Timeline
PublishedJun 10
Latest updateMay 2

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM eve…

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDapple/iphone_os18 versions+17
▶NVDapple/safari4.0_beta+25
▶NVDgoogle/chrome1.0.154.53

Patches

Patch: lists.apple.com ↗Patch: lists.apple.com ↗Patch: securitytracker.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2fpc-5vfr-7xv5: Use-after-free vulnerability in WebKit, as used in Apple Safari before 4↗2022-05-02
▶
OSV
CVE-2009-1690: Use-after-free vulnerability in WebKit, as used in Apple Safari before 4↗2009-06-10
▶

📋Vendor Advisories

4
Ubuntu
Qt vulnerabilities↗2009-11-10
▶
Ubuntu
WebKit vulnerabilities↗2009-09-23
▶
Ubuntu
KDE-Libs vulnerabilities↗2009-08-24
▶
Red Hat
kdelibs: KHTML Incorrect handling <head> element content once the <head> element was removed (DoS, ACE)↗2009-06-25
▶

💬Community

1
Bugzilla
CVE-2009-1690 kdelibs: KHTML Incorrect handling <head> element content once the <head> element was removed (DoS, ACE)↗2009-06-12
▶