CVE

Id
39125  
CVE No.
CVE-2009-1690  
Status
Candidate  
Description
Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
429740 39125 CVE-2009-1690 IDEFENSE:20090608 Multiple Vendor WebKit Error Handling Use After Free Vulnerability  View
429741 39125 CVE-2009-1690 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803  View
429742 39125 CVE-2009-1690 CONFIRM:http://support.apple.com/kb/HT3613  View
429743 39125 CVE-2009-1690 CONFIRM:http://support.apple.com/kb/HT3639  View
429744 39125 CVE-2009-1690 APPLE:APPLE-SA-2009-06-08-1  View
429745 39125 CVE-2009-1690 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
429746 39125 CVE-2009-1690 APPLE:APPLE-SA-2009-06-17-1  View
429747 39125 CVE-2009-1690 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html  View
429748 39125 CVE-2009-1690 DEBIAN:DSA-1950  View
429749 39125 CVE-2009-1690 URL:http://www.debian.org/security/2009/dsa-1950  View
429750 39125 CVE-2009-1690 FEDORA:FEDORA-2009-8020  View
429751 39125 CVE-2009-1690 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html  View
429752 39125 CVE-2009-1690 FEDORA:FEDORA-2009-8039  View
429753 39125 CVE-2009-1690 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html  View
429754 39125 CVE-2009-1690 FEDORA:FEDORA-2009-8046  View
429755 39125 CVE-2009-1690 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html  View
429756 39125 CVE-2009-1690 FEDORA:FEDORA-2009-8049  View
429757 39125 CVE-2009-1690 URL:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html  View
429758 39125 CVE-2009-1690 MANDRIVA:MDVSA-2009:330  View
429759 39125 CVE-2009-1690 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2009:330  View
429760 39125 CVE-2009-1690 SUSE:SUSE-SR:2011:002  View
429761 39125 CVE-2009-1690 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
429762 39125 CVE-2009-1690 UBUNTU:USN-822-1  View
429763 39125 CVE-2009-1690 URL:http://www.ubuntu.com/usn/USN-822-1  View
429764 39125 CVE-2009-1690 UBUNTU:USN-857-1  View
429765 39125 CVE-2009-1690 URL:http://www.ubuntu.com/usn/USN-857-1  View
429766 39125 CVE-2009-1690 UBUNTU:USN-836-1  View
429767 39125 CVE-2009-1690 URL:http://www.ubuntu.com/usn/USN-836-1  View
429768 39125 CVE-2009-1690 BID:35260  View
429769 39125 CVE-2009-1690 URL:http://www.securityfocus.com/bid/35260  View
429770 39125 CVE-2009-1690 OSVDB:54990  View
429771 39125 CVE-2009-1690 URL:http://osvdb.org/54990  View
429772 39125 CVE-2009-1690 OVAL:oval:org.mitre.oval:def:11009  View
429773 39125 CVE-2009-1690 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11009  View
429774 39125 CVE-2009-1690 SECTRACK:1022345  View
429775 39125 CVE-2009-1690 URL:http://securitytracker.com/id?1022345  View
429776 39125 CVE-2009-1690 SECUNIA:35379  View
429777 39125 CVE-2009-1690 URL:http://secunia.com/advisories/35379  View
429778 39125 CVE-2009-1690 SECUNIA:36057  View
429779 39125 CVE-2009-1690 URL:http://secunia.com/advisories/36057  View
429780 39125 CVE-2009-1690 SECUNIA:36062  View
429781 39125 CVE-2009-1690 URL:http://secunia.com/advisories/36062  View
429782 39125 CVE-2009-1690 SECUNIA:37746  View
429783 39125 CVE-2009-1690 URL:http://secunia.com/advisories/37746  View
429784 39125 CVE-2009-1690 SECUNIA:36790  View
429785 39125 CVE-2009-1690 URL:http://secunia.com/advisories/36790  View
429786 39125 CVE-2009-1690 SECUNIA:43068  View
429787 39125 CVE-2009-1690 URL:http://secunia.com/advisories/43068  View
429788 39125 CVE-2009-1690 VUPEN:ADV-2009-1522  View
429789 39125 CVE-2009-1690 URL:http://www.vupen.com/english/advisories/2009/1522  View
429790 39125 CVE-2009-1690 VUPEN:ADV-2009-1621  View
429791 39125 CVE-2009-1690 URL:http://www.vupen.com/english/advisories/2009/1621  View
429792 39125 CVE-2009-1690 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40763 JVNDB-2009-001769 複数の Apple 製品におけるリダイレクト処理に関する任意の Web サイトから画像を読まれる脆弱性 複数の Apple 製品の WebKit には、リダイレクトを正しく処理しないことにより、任意の Web サイトから画像を読まれる脆弱性が存在します。 CVE-2009-1694 39125 5.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001769.html  View