Lucene search

MitreCVE-2009-0070

HistoryJan 08, 2009 - 7:30 p.m.

CVE-2009-0070

2009-01-0819:30:11

CWE-189

mitre

web.nvd.nist.gov

cve-2009-0070

apple safari

integer signedness error

remote attack

denial of service

application crash

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.094

Percentile

94.8%

JSON

Integer signedness error in Apple Safari allows remote attackers to read the contents of arbitrary memory locations, cause a denial of service (application crash), and probably have unspecified other impact via the array index of the arguments array in a JavaScript function, possibly a related issue to CVE-2008-2307.

Affected configurations

Nvd

Node

applesafari

VendorProductVersionCPE
applesafari*cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	safari	*	cpe:2.3:a:apple:safari::::::::

References

exchange.xforce.ibmcloud.com/vulnerabilities/48214

www.exploit-db.com/exploits/7673

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.094

Percentile

94.8%

JSON

Related for CVE-2009-0070