CVE

Id
39121  
CVE No.
CVE-2009-1686  
Status
Candidate  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429612 39121 CVE-2009-1686 CONFIRM:http://support.apple.com/kb/HT3613  View
429613 39121 CVE-2009-1686 CONFIRM:http://support.apple.com/kb/HT3639  View
429614 39121 CVE-2009-1686 APPLE:APPLE-SA-2009-06-08-1  View
429615 39121 CVE-2009-1686 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
429616 39121 CVE-2009-1686 APPLE:APPLE-SA-2009-06-17-1  View
429617 39121 CVE-2009-1686 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html  View
429618 39121 CVE-2009-1686 SUSE:SUSE-SR:2011:002  View
429619 39121 CVE-2009-1686 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
429620 39121 CVE-2009-1686 BID:35260  View
429621 39121 CVE-2009-1686 URL:http://www.securityfocus.com/bid/35260  View
429622 39121 CVE-2009-1686 BID:35311  View
429623 39121 CVE-2009-1686 URL:http://www.securityfocus.com/bid/35311  View
429624 39121 CVE-2009-1686 OSVDB:54984  View
429625 39121 CVE-2009-1686 URL:http://osvdb.org/54984  View
429626 39121 CVE-2009-1686 SECTRACK:1022345  View
429627 39121 CVE-2009-1686 URL:http://securitytracker.com/id?1022345  View
429628 39121 CVE-2009-1686 SECUNIA:35379  View
429629 39121 CVE-2009-1686 URL:http://secunia.com/advisories/35379  View
429630 39121 CVE-2009-1686 SECUNIA:43068  View
429631 39121 CVE-2009-1686 URL:http://secunia.com/advisories/43068  View
429632 39121 CVE-2009-1686 VUPEN:ADV-2009-1522  View
429633 39121 CVE-2009-1686 URL:http://www.vupen.com/english/advisories/2009/1522  View
429634 39121 CVE-2009-1686 VUPEN:ADV-2009-1621  View
429635 39121 CVE-2009-1686 URL:http://www.vupen.com/english/advisories/2009/1621  View
429636 39121 CVE-2009-1686 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40751 JVNDB-2009-001757 複数の Apple 製品の WebKit における DOM イベントハンドラの再帰処理に関する任意のコードを実行される脆弱性 複数の Apple 製品の WebKit、およびその他の製品には、DOM イベントハンドラの再帰処理に関して不備があるため、任意のコードを実行される、あるいはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1690 39121 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001757.html  View