CVE

Id
39136  
CVE No.
CVE-2009-1701  
Status
Candidate  
Description
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430097 39136 CVE-2009-1701 BUGTRAQ:20090608 ZDI-09-033: Apple WebKit dir Attribute Freeing Dangling Object Pointer Vulnerability  View
430098 39136 CVE-2009-1701 URL:http://www.securityfocus.com/archive/1/archive/1/504172/100/0/threaded  View
430099 39136 CVE-2009-1701 MISC:http://www.zerodayinitiative.com/advisories/ZDI-09-033/  View
430100 39136 CVE-2009-1701 CONFIRM:http://support.apple.com/kb/HT3613  View
430101 39136 CVE-2009-1701 CONFIRM:http://support.apple.com/kb/HT3639  View
430102 39136 CVE-2009-1701 APPLE:APPLE-SA-2009-06-08-1  View
430103 39136 CVE-2009-1701 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430104 39136 CVE-2009-1701 APPLE:APPLE-SA-2009-06-17-1  View
430105 39136 CVE-2009-1701 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html  View
430106 39136 CVE-2009-1701 SUSE:SUSE-SR:2011:002  View
430107 39136 CVE-2009-1701 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
430108 39136 CVE-2009-1701 BID:35260  View
430109 39136 CVE-2009-1701 URL:http://www.securityfocus.com/bid/35260  View
430110 39136 CVE-2009-1701 BID:35325  View
430111 39136 CVE-2009-1701 URL:http://www.securityfocus.com/bid/35325  View
430112 39136 CVE-2009-1701 OSVDB:55008  View
430113 39136 CVE-2009-1701 URL:http://osvdb.org/55008  View
430114 39136 CVE-2009-1701 SECTRACK:1022345  View
430115 39136 CVE-2009-1701 URL:http://securitytracker.com/id?1022345  View
430116 39136 CVE-2009-1701 SECUNIA:35379  View
430117 39136 CVE-2009-1701 URL:http://secunia.com/advisories/35379  View
430118 39136 CVE-2009-1701 SECUNIA:43068  View
430119 39136 CVE-2009-1701 URL:http://secunia.com/advisories/43068  View
430120 39136 CVE-2009-1701 VUPEN:ADV-2009-1522  View
430121 39136 CVE-2009-1701 URL:http://www.vupen.com/english/advisories/2009/1522  View
430122 39136 CVE-2009-1701 VUPEN:ADV-2009-1621  View
430123 39136 CVE-2009-1701 URL:http://www.vupen.com/english/advisories/2009/1621  View
430124 39136 CVE-2009-1701 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40738 JVNDB-2009-001744 Apple Safari の CoreGraphics における任意のコードを実行される脆弱性 Windows 上で動作する Apple Safari の CoreGraphics には、TrueType フォントのオートヒンティング処理に関して不備があることにより、任意のコードを実行される、あるいはサービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2009-1705 39136 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001744.html  View