NVD

Id
48257  
Name
CVE-2009-0945  
Description
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-05-13  
Modified Date
2011-02-17  
Seq
2009-0945  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242607 48257 CVE-2009-0945 http://code.google.com/p/chromium/issues/detail?id=9019  View
242608 48257 CVE-2009-0945 http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html  View
242609 48257 CVE-2009-0945 APPLE-SA-2009-06-17-1  View
242610 48257 CVE-2009-0945 APPLE-SA-2009-05-12  View
242611 48257 CVE-2009-0945 APPLE-SA-2009-05-12  View
242612 48257 CVE-2009-0945 APPLE-SA-2009-05-12  View
242613 48257 CVE-2009-0945 SUSE-SR:2011:002  View
242614 48257 CVE-2009-0945 oval:org.mitre.oval:def:11584  View
242615 48257 CVE-2009-0945 http://support.apple.com/kb/HT3549  View
242616 48257 CVE-2009-0945 http://support.apple.com/kb/HT3550  View
242617 48257 CVE-2009-0945 http://support.apple.com/kb/HT3639  View
242618 48257 CVE-2009-0945 DSA-1950  View
242619 48257 CVE-2009-0945 RHSA-2009:1130  View
242620 48257 CVE-2009-0945 20090519 ZDI-09-022: Apple Safari Malformed SVGList Parsing Code Execution Vulnerability  View
242621 48257 CVE-2009-0945 34924  View
242622 48257 CVE-2009-0945 1022207  View
242623 48257 CVE-2009-0945 USN-822-1  View
242624 48257 CVE-2009-0945 USN-836-1  View
242625 48257 CVE-2009-0945 USN-857-1  View
242626 48257 CVE-2009-0945 USN-823-1  View
242627 48257 CVE-2009-0945 TA09-133A  View
242628 48257 CVE-2009-0945 ADV-2009-1297  View
242629 48257 CVE-2009-0945 ADV-2009-1298  View
242630 48257 CVE-2009-0945 ADV-2009-1321  View
242631 48257 CVE-2009-0945 ADV-2009-1621  View
242632 48257 CVE-2009-0945 ADV-2011-0212  View
242633 48257 CVE-2009-0945 http://www.zerodayinitiative.com/advisories/ZDI-09-022  View
242634 48257 CVE-2009-0945 safari-webkit-svglist-bo(50477)  View
242635 48257 CVE-2009-0945 FEDORA-2009-6166  View
242636 48257 CVE-2009-0945 FEDORA-2009-8039  View
242637 48257 CVE-2009-0945 FEDORA-2009-8049  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40330 JVNDB-2009-001336 WebKit における SVGPathList データ構造を持つドキュメントの処理に関する任意のコードを実行される脆弱性 WebKit の insertItemBefore メソッドには、SVGPathList データ構造を持つドキュメントの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-0945 38376 CVE-2009-0945 48257 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001336.html 2009-05-12 2009-06-29 View