Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1687

Опубликовано: 25 июн. 2009
Источник: redhat
CVSS2: 6.8
EPSS Низкий

Описание

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."

Дополнительная информация

Статус:

Critical
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=506453kdelibs: Integer overflow in KJS JavaScript garbage collector

EPSS

Процентиль: 91%
0.0736
Низкий

6.8 Medium

CVSS2

Связанные уязвимости

ubuntu
около 16 лет назад

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."

nvd
около 16 лет назад

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."

debian
около 16 лет назад

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, ...

github
около 3 лет назад

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."

oracle-oval
почти 16 лет назад

ELSA-2009-1127: kdelibs security update (CRITICAL)

EPSS

Процентиль: 91%
0.0736
Низкий

6.8 Medium

CVSS2