CVEvulnerability
CVE-2009-1692
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.
Affected configurations
• apple iphone os 1.0.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1.0
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
• apple iphone os 2.1.1
• apple iphone os 2.2
• apple iphone os 2.2.1
• apple iphone os
• apple ipod touch
• apple safari
Related
Weakness · not in database (1)
References
- http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121 kb.palm.com
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/55242 osvdb.org
- http://secunia.com/advisories/36977 secunia.com
- http://secunia.com/advisories/37746 secunia.com
- http://secunia.com/advisories/43068 secunia.com
- http://support.apple.com/kb/HT3639 Vendor Advisory
- http://www.debian.org/security/2009/dsa-1950 www.debian.org
- http://www.g-sec.lu/one-bug-to-rule-them-all.html www.g-sec.lu
- http://www.securityfocus.com/archive/1/504969/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/504988/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/504989/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/505006/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35414 www.securityfocus.com
- http://www.securityfocus.com/bid/35446 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- https://bugs.webkit.org/show_bug.cgi?id=23319 bugs.webkit.org
- https://www.exploit-db.com/exploits/9160 www.exploit-db.com
- http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121 kb.palm.com
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/55242 osvdb.org
- http://secunia.com/advisories/36977 secunia.com
- http://secunia.com/advisories/37746 secunia.com
- http://secunia.com/advisories/43068 secunia.com
- http://support.apple.com/kb/HT3639 Vendor Advisory
- http://www.debian.org/security/2009/dsa-1950 www.debian.org
- http://www.g-sec.lu/one-bug-to-rule-them-all.html www.g-sec.lu
- http://www.securityfocus.com/archive/1/504969/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/504988/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/504989/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/505006/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35414 www.securityfocus.com
- http://www.securityfocus.com/bid/35446 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- https://bugs.webkit.org/show_bug.cgi?id=23319 bugs.webkit.org
- https://www.exploit-db.com/exploits/9160 www.exploit-db.com