CVE

Id
39144  
CVE No.
CVE-2009-1709  
Status
Candidate  
Description
Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430239 39144 CVE-2009-1709 MISC:http://www.zerodayinitiative.com/advisories/ZDI-09-034/  View
430240 39144 CVE-2009-1709 CONFIRM:http://support.apple.com/kb/HT3613  View
430241 39144 CVE-2009-1709 APPLE:APPLE-SA-2009-06-08-1  View
430242 39144 CVE-2009-1709 URL:http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html  View
430243 39144 CVE-2009-1709 MANDRIVA:MDVSA-2010:182  View
430244 39144 CVE-2009-1709 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2010:182  View
430245 39144 CVE-2009-1709 REDHAT:RHSA-2009:1130  View
430246 39144 CVE-2009-1709 URL:http://www.redhat.com/support/errata/RHSA-2009-1130.html  View
430247 39144 CVE-2009-1709 SUSE:SUSE-SR:2011:002  View
430248 39144 CVE-2009-1709 URL:http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html  View
430249 39144 CVE-2009-1709 UBUNTU:USN-823-1  View
430250 39144 CVE-2009-1709 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-823-1  View
430251 39144 CVE-2009-1709 BID:35260  View
430252 39144 CVE-2009-1709 URL:http://www.securityfocus.com/bid/35260  View
430253 39144 CVE-2009-1709 BID:35334  View
430254 39144 CVE-2009-1709 URL:http://www.securityfocus.com/bid/35334  View
430255 39144 CVE-2009-1709 OSVDB:55013  View
430256 39144 CVE-2009-1709 URL:http://osvdb.org/55013  View
430257 39144 CVE-2009-1709 OVAL:oval:org.mitre.oval:def:10162  View
430258 39144 CVE-2009-1709 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10162  View
430259 39144 CVE-2009-1709 SECTRACK:1022345  View
430260 39144 CVE-2009-1709 URL:http://securitytracker.com/id?1022345  View
430261 39144 CVE-2009-1709 SECUNIA:35379  View
430262 39144 CVE-2009-1709 URL:http://secunia.com/advisories/35379  View
430263 39144 CVE-2009-1709 SECUNIA:35576  View
430264 39144 CVE-2009-1709 URL:http://secunia.com/advisories/35576  View
430265 39144 CVE-2009-1709 SECUNIA:36461  View
430266 39144 CVE-2009-1709 URL:http://secunia.com/advisories/36461  View
430267 39144 CVE-2009-1709 SECUNIA:43068  View
430268 39144 CVE-2009-1709 URL:http://secunia.com/advisories/43068  View
430269 39144 CVE-2009-1709 VUPEN:ADV-2009-1522  View
430270 39144 CVE-2009-1709 URL:http://www.vupen.com/english/advisories/2009/1522  View
430271 39144 CVE-2009-1709 VUPEN:ADV-2011-0212  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40757 JVNDB-2009-001763 Apple Safari の WebKit における XSLT 機能に関する他のセキュリティゾーンからファイルを読まれる脆弱性 Apple Safari の WebKit にある XSLT 機能には、document 関数を正しく実行しないため、他のセキュリティゾーンからファイルを読まれる脆弱性が存在します。 CVE-2009-1713 39144 7.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001763.html  View