NVD

Id
48967  
Name
CVE-2009-1698  
Description
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2012-03-30  
Seq
2009-1698  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247503 48967 CVE-2009-1698 http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html  View
247504 48967 CVE-2009-1698 APPLE-SA-2009-06-08-1  View
247505 48967 CVE-2009-1698 APPLE-SA-2009-06-17-1  View
247506 48967 CVE-2009-1698 SUSE-SR:2011:002  View
247507 48967 CVE-2009-1698 oval:org.mitre.oval:def:9484  View
247508 48967 CVE-2009-1698 1022345  View
247509 48967 CVE-2009-1698 http://support.apple.com/kb/HT3613  View
247510 48967 CVE-2009-1698 http://support.apple.com/kb/HT3639  View
247511 48967 CVE-2009-1698 DSA-1950  View
247512 48967 CVE-2009-1698 MDVSA-2009:330  View
247513 48967 CVE-2009-1698 RHSA-2009:1128  View
247514 48967 CVE-2009-1698 20090608 ZDI-09-032: Apple WebKit attr() Invalid Attribute Memory Corruption Vulnerability  View
247515 48967 CVE-2009-1698 20090614 [TZO-37-2009] Apple Safari <v4 Remote code execution  View
247516 48967 CVE-2009-1698 35260  View
247517 48967 CVE-2009-1698 35318  View
247518 48967 CVE-2009-1698 USN-822-1  View
247519 48967 CVE-2009-1698 USN-836-1  View
247520 48967 CVE-2009-1698 USN-857-1  View
247521 48967 CVE-2009-1698 ADV-2009-1522  View
247522 48967 CVE-2009-1698 ADV-2009-1621  View
247523 48967 CVE-2009-1698 ADV-2011-0212  View
247524 48967 CVE-2009-1698 http://www.zerodayinitiative.com/advisories/ZDI-09-032/  View
247525 48967 CVE-2009-1698 FEDORA-2009-8039  View
247526 48967 CVE-2009-1698 FEDORA-2009-8049  View
247527 48967 CVE-2009-1698 FEDORA-2009-8046  View
247528 48967 CVE-2009-1698 FEDORA-2009-8020  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40767 JVNDB-2009-001773 複数の Apple 製品における CSS attr 関数の処理に関する任意のコードを実行される脆弱性 複数の Apple 製品の WebKit には、大きい数値の引数をもつカスケーディングスタイルシート (CSS) attr 関数の処理でポインタを初期化しないため、任意のコードを実行される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1698 39129 CVE-2009-1698 48967 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001773.html 2009-06-08 2009-07-17 View