CVE List

Id CVE No. Status Description Phase Votes Comments Actions
39121  CVE-2009-1686  Candidate  WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.  Assigned (20090520)  None (candidate not yet proposed)    View
39116  CVE-2009-1681  Candidate  WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy and conduct "clickjacking" attacks via a crafted HTML document.  Assigned (20090520)  None (candidate not yet proposed)    View
39133  CVE-2009-1698  Candidate  WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.  Assigned (20090520)  None (candidate not yet proposed)    View
39128  CVE-2009-1693  Candidate  WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue."  Assigned (20090520)  None (candidate not yet proposed)    View
39146  CVE-2009-1711  Candidate  WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.  Assigned (20090520)  None (candidate not yet proposed)    View

Page 364 of 20943, showing 5 records out of 104715 total, starting on record 1816, ending on 1820

Actions