[Forgot Password]
Login  Register Subscribe

23631

 
 

126941

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-1725

Date: (C)2009-07-09   (M)2017-11-18 


WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

CVSS Score: 9.3Access Vector: NETWORK
Exploit Score: 8.6Access Complexity: MEDIUM
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
SECTRACK-1022526
BID-35607
SECUNIA-35758
SECUNIA-36057
SECUNIA-36062
SECUNIA-36347
SECUNIA-36677
SECUNIA-36790
SECUNIA-37746
SECUNIA-43068
OSVDB-55739
ADV-2009-1827
ADV-2011-0212
APPLE-SA-2009-07-08-1
APPLE-SA-2009-09-09-1
DSA-1950
FEDORA-2009-8020
FEDORA-2009-8039
FEDORA-2009-8046
FEDORA-2009-8049
FEDORA-2009-8800
FEDORA-2009-8802
MDVSA-2009:330
SUSE-SR:2011:002
USN-836-1
USN-857-1
http://support.apple.com/kb/HT3666
http://support.apple.com/kb/HT3860
http://websvn.kde.org/?view=rev&revision=1002162
http://websvn.kde.org/?view=rev&revision=1002163
http://websvn.kde.org/?view=rev&revision=1002164
https://bugzilla.redhat.com/show_bug.cgi?id=513813

CPE    54
cpe:/h:apple:iphone
cpe:/h:apple:ipod_touch
cpe:/a:apple:safari:3.0.2b
cpe:/a:apple:safari:4.0
...
CWE    1
CWE-189
OVAL    25
oval:org.secpod.oval:def:300005
oval:org.secpod.oval:def:300796
oval:org.secpod.oval:def:100967
oval:org.secpod.oval:def:101453
...

© 2013 SecPod Technologies