NVD

Id
48955  
Name
CVE-2009-1686  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle constant (aka const) declarations in a type-conversion operation during JavaScript exception handling, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2011-02-17  
Seq
2009-1686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247347 48955 CVE-2009-1686 APPLE-SA-2009-06-08-1  View
247348 48955 CVE-2009-1686 APPLE-SA-2009-06-17-1  View
247349 48955 CVE-2009-1686 SUSE-SR:2011:002  View
247350 48955 CVE-2009-1686 1022345  View
247351 48955 CVE-2009-1686 http://support.apple.com/kb/HT3613  View
247352 48955 CVE-2009-1686 http://support.apple.com/kb/HT3639  View
247353 48955 CVE-2009-1686 35260  View
247354 48955 CVE-2009-1686 35311  View
247355 48955 CVE-2009-1686 ADV-2009-1522  View
247356 48955 CVE-2009-1686 ADV-2009-1621  View
247357 48955 CVE-2009-1686 ADV-2011-0212  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40747 JVNDB-2009-001753 複数の Apple 製品における型変換の問題に関する任意のコードを実行される脆弱性 複数の Apple 製品の WebKit には、JavaScript 例外処理の際、型変換における定数宣言を正しく処理しないため、任意のコードを実行される、あるいはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1686 39117 CVE-2009-1686 48955 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001753.html 2009-06-08 2009-07-14 View