Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

fstec Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

BDU:2015-04051

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 01 янв. 2015
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: fstec
CVSS2: 9.3
EPSS Низкий

ОписаниС

ΠœΠ½ΠΎΠΆΠ΅ΡΡ‚Π²Π΅Π½Π½Ρ‹Π΅ уязвимости ΠΏΠ°ΠΊΠ΅Ρ‚Π° libqt4-webkit-dbg ΠΎΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½ΠΎΠΉ систСмы DebianΒ GNU/Linux, эксплуатация ΠΊΠΎΡ‚ΠΎΡ€Ρ‹Ρ… ΠΌΠΎΠΆΠ΅Ρ‚ привСсти ΠΊ Π½Π°Ρ€ΡƒΡˆΠ΅Π½ΠΈΡŽ ΠΊΠΎΠ½Ρ„ΠΈΠ΄Π΅Π½Ρ†ΠΈΠ°Π»ΡŒΠ½ΠΎΡΡ‚ΠΈ, цСлостности ΠΈ доступности Π·Π°Ρ‰ΠΈΡ‰Π°Π΅ΠΌΠΎΠΉ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΈ. Эксплуатация уязвимостСй ΠΌΠΎΠΆΠ΅Ρ‚ Π±Ρ‹Ρ‚ΡŒ осущСствлСна ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎ

Π’Π΅Π½Π΄ΠΎΡ€

БообщСство свободного ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΠ½ΠΎΠ³ΠΎ обСспСчСния

НаимСнованиС ПО

Debian GNU/Linux

ВСрсия ПО

Π΄ΠΎ 5 (Debian GNU/Linux)

Вип ПО

ΠžΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½Π°Ρ систСма

ΠžΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½Ρ‹Π΅ систСмы ΠΈ Π°ΠΏΠΏΠ°Ρ€Π°Ρ‚Π½Ρ‹Π΅ ΠΏΠ»Π°Ρ‚Ρ„ΠΎΡ€ΠΌΡ‹

-

Π£Ρ€ΠΎΠ²Π΅Π½ΡŒ опасности уязвимости

Высокий ΡƒΡ€ΠΎΠ²Π΅Π½ΡŒ опасности (базовая ΠΎΡ†Π΅Π½ΠΊΠ° CVSS 2.0 составляСт 9,3)

Π’ΠΎΠ·ΠΌΠΎΠΆΠ½Ρ‹Π΅ ΠΌΠ΅Ρ€Ρ‹ ΠΏΠΎ ΡƒΡΡ‚Ρ€Π°Π½Π΅Π½ΠΈΡŽ уязвимости

ΠŸΡ€ΠΎΠ±Π»Π΅ΠΌΠ° ΠΌΠΎΠΆΠ΅Ρ‚ Π±Ρ‹Ρ‚ΡŒ Ρ€Π΅ΡˆΠ΅Π½Π° ΠΎΠ±Π½ΠΎΠ²Π»Π΅Π½ΠΈΠ΅ΠΌ ΠΎΠΏΠ΅Ρ€Π°Ρ†ΠΈΠΎΠ½Π½ΠΎΠΉ систСмы Π΄ΠΎ ΡΠ»Π΅Π΄ΡƒΡŽΡ‰ΠΈΡ… вСрсий ΠΏΠ°ΠΊΠ΅Ρ‚ΠΎΠ² Π² зависимости ΠΎΡ‚ Π°Ρ€Ρ…ΠΈΡ‚Π΅ΠΊΡ‚ΡƒΡ€Ρ‹:
Debian GNU/Linux 5:
ppc:
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
libqt4-core - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqt4-sql-ibase - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
libqt4-sql-sqlite - 4.4.3-1+lenny1
libqt4-xmlpatterns - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
qt4-qmake - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
s390x:
libqt4-xmlpatterns - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
qt4-qmake - 4.4.3-1+lenny1
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-core - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqt4-sql-sqlite - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
i686:
libqt4-test - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqt4-sql-sqlite - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
qt4-qmake - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqt4-xmlpatterns - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-core - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
libqt4-sql-ibase - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
sparc:
qt4-qmake - 4.4.3-1+lenny1
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqt4-sql-ibase - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-sql-sqlite - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
libqt4-core - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
libqt4-xmlpatterns - 4.4.3-1+lenny1
x86-64:
libqt4-sql-sqlite - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-core - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
qt4-qmake - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
libqt4-xmlpatterns - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-sql-ibase - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
armel:
qt4-qmake - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
libqt4-core - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
libqt4-xmlpatterns - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
libqt4-sql-sqlite - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
alpha:
libqt4-core - 4.4.3-1+lenny1
libqt4-dbus - 4.4.3-1+lenny1
libqt4-svg - 4.4.3-1+lenny1
libqt4-sql-psql - 4.4.3-1+lenny1
qt4-dev-tools - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqt4-network - 4.4.3-1+lenny1
libqt4-dbg - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-help - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
libqt4-sql-sqlite2 - 4.4.3-1+lenny1
libqt4-webkit - 4.4.3-1+lenny1
libqt4-xmlpatterns-dbg - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
libqt4-qt3support - 4.4.3-1+lenny1
qt4-qmake - 4.4.3-1+lenny1
qt4-qtconfig - 4.4.3-1+lenny1
libqt4-dev - 4.4.3-1+lenny1
qt4-demos - 4.4.3-1+lenny1
libqt4-xmlpatterns - 4.4.3-1+lenny1
libqt4-opengl - 4.4.3-1+lenny1
libqt4-xml - 4.4.3-1+lenny1
libqt4-sql-odbc - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
libqt4-script - 4.4.3-1+lenny1
libqt4-designer - 4.4.3-1+lenny1
libqt4-sql-sqlite - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
libqt4-opengl-dev - 4.4.3-1+lenny1
libqt4-sql - 4.4.3-1+lenny1
libqt4-sql-mysql - 4.4.3-1+lenny1
ia64:
libqt4-xmlpatterns - 4.4.3-1+lenny1
libqt4-assistant - 4.4.3-1+lenny1
libqtgui4 - 4.4.3-1+lenny1
libqt4-gui - 4.4.3-1+lenny1
libqt4-test - 4.4.3-1+lenny1
libqt4-webkit-dbg - 4.4.3-1+lenny1
libqtcore4 - 4.4.3-1+lenny1
qt4-designer - 4.4.3-1+lenn

Бтатус уязвимости

ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½Π° ΠΏΡ€ΠΎΠΈΠ·Π²ΠΎΠ΄ΠΈΡ‚Π΅Π»Π΅ΠΌ

НаличиС эксплойта

Π”Π°Π½Π½Ρ‹Π΅ ΡƒΡ‚ΠΎΡ‡Π½ΡΡŽΡ‚ΡΡ

Π˜Π½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΡ ΠΎΠ± устранСнии

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ устранСна

Бсылки Π½Π° источники

Π˜Π΄Π΅Π½Ρ‚ΠΈΡ„ΠΈΠΊΠ°Ρ‚ΠΎΡ€Ρ‹ Π΄Ρ€ΡƒΠ³ΠΈΡ… систСм описаний уязвимостСй

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 95%
0.09322
Низкий

9.3 Critical

CVSS2

БвязанныС уязвимости

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2009-0945

ubuntu
ΠΎΠΊΠΎΠ»ΠΎ 17 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

redhat Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2009-0945

redhat
ΠΎΠΊΠΎΠ»ΠΎ 17 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

nvd Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2009-0945

nvd
ΠΎΠΊΠΎΠ»ΠΎ 17 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

debian Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2009-0945

debian
ΠΎΠΊΠΎΠ»ΠΎ 17 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Array index error in the insertItemBefore method in WebKit, as used in ...

github Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

GHSA-8rhj-8gqw-pxm4

github
ΠΎΠΊΠΎΠ»ΠΎ 4 Π»Π΅Ρ‚ Π½Π°Π·Π°Π΄

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 95%
0.09322
Низкий

9.3 Critical

CVSS2

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ BDU:2015-04051