CVEvulnerability
CVE-2009-1701
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-06-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
Affected configurations
• apple safari (<= 3.2.2)
• apple safari 2.0
• apple safari 2.0.0
• apple safari 2.0.1
• apple safari 2.0.2
• apple safari 2.0.3
• apple safari 2.0.4
• apple safari 3.0
• apple safari 3.0.0
• apple safari 3.0.0b
• apple safari 3.0.1
• apple safari 3.0.1b
• apple safari 3.0.2
• apple safari 3.0.2b
• apple safari 3.0.3
• apple safari 3.0.3b
• apple safari 3.0.4
• apple safari 3.0.4b
• apple safari 3.1.0
• apple safari 3.1.0b
• apple safari 3.1.1
• apple safari 3.1.2
• apple safari 3.2.0
• apple safari 3.2.1
• apple iphone os 1.0.0
• apple iphone os 1.0.1
• apple iphone os 1.0.2
• apple iphone os 1.1.0
• apple iphone os 1.1.1
• apple iphone os 1.1.2
• apple iphone os 1.1.3
• apple iphone os 1.1.4
• apple iphone os 1.1.5
• apple iphone os 2.0
• apple iphone os 2.0.0
• apple iphone os 2.0.1
• apple iphone os 2.0.2
• apple iphone os 2.1
• apple iphone os 2.1.1
• apple iphone os 2.2
• apple iphone os 2.2.1
• apple ipod touch
• apple iphone os
Related
Weakness · not in database (1)
References
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/55008 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://secunia.com/advisories/43068 secunia.com
- http://securitytracker.com/id?1022345 Patch
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3639 support.apple.com
- http://www.securityfocus.com/archive/1/504172/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35260 Exploit
- http://www.securityfocus.com/bid/35325 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-09-033/ Patch
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html lists.apple.com
- http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html Patch, Vendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html lists.opensuse.org
- http://osvdb.org/55008 osvdb.org
- http://secunia.com/advisories/35379 Vendor Advisory
- http://secunia.com/advisories/43068 secunia.com
- http://securitytracker.com/id?1022345 Patch
- http://support.apple.com/kb/HT3613 Patch, Vendor Advisory
- http://support.apple.com/kb/HT3639 support.apple.com
- http://www.securityfocus.com/archive/1/504172/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35260 Exploit
- http://www.securityfocus.com/bid/35325 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1522 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1621 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0212 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-09-033/ Patch