[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-1725Date: (C)2009-07-09   (M)2024-02-16


WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1022526
BID-35607
SECUNIA-35758
SECUNIA-36057
SECUNIA-36062
SECUNIA-36347
SECUNIA-36677
SECUNIA-36790
SECUNIA-37746
SECUNIA-43068
OSVDB-55739
ADV-2009-1827
ADV-2011-0212
APPLE-SA-2009-07-08-1
APPLE-SA-2009-09-09-1
DSA-1950
FEDORA-2009-8020
FEDORA-2009-8039
FEDORA-2009-8046
FEDORA-2009-8049
FEDORA-2009-8800
FEDORA-2009-8802
MDVSA-2009:330
SUSE-SR:2011:002
USN-836-1
USN-857-1
http://support.apple.com/kb/HT3666
http://support.apple.com/kb/HT3860
http://websvn.kde.org/?view=rev&revision=1002162
http://websvn.kde.org/?view=rev&revision=1002163
http://websvn.kde.org/?view=rev&revision=1002164
https://bugzilla.redhat.com/show_bug.cgi?id=513813
oval:org.mitre.oval:def:5777

CPE    52
cpe:/o:apple:iphone_os:1.0.0
cpe:/o:apple:iphone_os:1.0.2
cpe:/o:apple:iphone_os:1.0.1
cpe:/a:apple:safari:3.0.2b
...
CWE    1
CWE-189
OVAL    25
oval:org.secpod.oval:def:700474
oval:org.secpod.oval:def:101453
oval:org.secpod.oval:def:102464
oval:org.secpod.oval:def:102064
...

© SecPod Technologies