Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-1690
HistoryJun 10, 2009 - 2:30 p.m.

CVE-2009-1690

2009-06-1014:30:00
CWE-399
[email protected]
web.nvd.nist.gov
43
cve-2009-1690
use-after-free vulnerability
webkit
apple safari
iphone os
ipod touch
google chrome
arbitrary code execution
denial of service
memory corruption
application crash
dom event handlers
html error

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to “recursion in certain DOM event handlers.”

Affected configurations

NVD
Node
applesafariRange≤4.0_betamac
OR
applesafariMatch0.8mac
OR
applesafariMatch0.9mac
OR
applesafariMatch1.0mac
OR
applesafariMatch1.0.3mac
OR
applesafariMatch1.1mac
OR
applesafariMatch1.2mac
OR
applesafariMatch1.3mac
OR
applesafariMatch1.3.1mac
OR
applesafariMatch1.3.2mac
OR
applesafariMatch2.0mac
OR
applesafariMatch2.0.2mac
OR
applesafariMatch2.0.4mac
OR
applesafariMatch3.0mac
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.3mac
OR
applesafariMatch3.0.4mac
OR
applesafariMatch3.1mac
OR
applesafariMatch3.1.1mac
OR
applesafariMatch3.1.2mac
OR
applesafariMatch3.2.1mac
OR
applesafariMatch3.2.3mac
Node
applesafariRange≤3.2.3windows
OR
applesafariMatch3.0windows
OR
applesafariMatch3.0.1windows
OR
applesafariMatch3.0.2windows
OR
applesafariMatch3.0.3windows
OR
applesafariMatch3.0.4windows
OR
applesafariMatch3.1windows
OR
applesafariMatch3.1.1windows
OR
applesafariMatch3.1.2windows
OR
applesafariMatch3.2-windows
OR
applesafariMatch3.2.1windows
OR
applesafariMatch3.2.2windows
Node
appleiphone_osMatch1.0
OR
appleiphone_osMatch1.0.0
OR
appleiphone_osMatch1.0.1
OR
appleiphone_osMatch1.0.1-iphone
OR
appleiphone_osMatch1.0.2
OR
appleiphone_osMatch1.0.2-iphone
OR
appleiphone_osMatch1.1
OR
appleiphone_osMatch1.1.0
OR
appleiphone_osMatch1.1.0-iphone
OR
appleiphone_osMatch1.1.0-ipodtouch
OR
appleiphone_osMatch1.1.1
OR
appleiphone_osMatch1.1.1-iphone
OR
appleiphone_osMatch1.1.2
OR
appleiphone_osMatch1.1.2-iphone
OR
appleiphone_osMatch1.1.2-ipodtouch
OR
appleiphone_osMatch1.1.3
OR
appleiphone_osMatch1.1.3-iphone
OR
appleiphone_osMatch1.1.3-ipodtouch
OR
appleiphone_osMatch1.1.4
OR
appleiphone_osMatch1.1.4-iphone
OR
appleiphone_osMatch1.1.4-ipodtouch
OR
appleiphone_osMatch1.1.5
OR
appleiphone_osMatch1.1.5-iphone
OR
appleiphone_osMatch1.1.5-ipodtouch
OR
appleiphone_osMatch2.0
OR
appleiphone_osMatch2.0.0
OR
appleiphone_osMatch2.0.0-iphone
OR
appleiphone_osMatch2.0.0-ipodtouch
OR
appleiphone_osMatch2.0.1
OR
appleiphone_osMatch2.0.1-iphone
OR
appleiphone_osMatch2.0.1-ipodtouch
OR
appleiphone_osMatch2.0.2
OR
appleiphone_osMatch2.0.2-iphone
OR
appleiphone_osMatch2.0.2-ipodtouch
OR
appleiphone_osMatch2.1
OR
appleiphone_osMatch2.1-iphone
OR
appleiphone_osMatch2.1-ipodtouch
OR
appleiphone_osMatch2.2-iphone
OR
appleiphone_osMatch2.2-ipodtouch
OR
appleiphone_osMatch2.2.1-iphone
OR
appleiphone_osMatch2.2.1-ipodtouch
Node
googlechromeMatch1.0.154.53

References

Related

prion 1
securityvulns 2
nvd 1
debiancve 1
ubuntucve 1
cvelist 1
veracode 1
nessus 25
chrome 1
altlinux 1
openvas 37
redhat 1
osv 4
debian 5
centos 1
oraclelinux 1
ubuntu 3
fedora 6
seebug 1
prion
prion
Design/Logic Flaw
2009-06-10 14:30:00
securityvulns
securityvulns
iDefense Security Advisory 06.11.09: Multiple Vendor WebKit Error Handling Use After Free Vulnerability
2009-06-14 00:00:00
WebKit / Apple Safari multiple security vulnerabilities
2009-06-23 00:00:00
nvd
nvd
CVE-2009-1690
2009-06-10 14:30:00
debiancve
debiancve
CVE-2009-1690
2009-06-10 14:30:00
ubuntucve
ubuntucve
CVE-2009-1690
2009-06-10 00:00:00
cvelist
cvelist
CVE-2009-1690
2009-06-10 14:00:00
veracode
veracode
Use-after-free
2020-04-10 00:39:14
nessus
nessus
Google Chrome < 2.0.172.31 WebKit Multiple Vulnerabilities
2009-06-11 00:00:00
Google Chrome < 2.0.172.31 Multiple Vulnerabilities
2004-08-18 00:00:00
Scientific Linux Security Update : kdelibs on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
chrome
chrome
Stable update: 2 WebKit security fixes
2009-06-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package kde4libs version 4.2.4-alt3
2009-06-29 00:00:00
openvas
openvas
CentOS Update for kdelibs CESA-2009:1127 centos5 i386
2011-08-09 00:00:00
CentOS Security Advisory CESA-2009:1127 (kdelibs)
2009-06-30 00:00:00
Oracle: Security Advisory (ELSA-2009-1127)
2015-10-08 00:00:00
redhat
redhat
(RHSA-2009:1127) Critical: kdelibs security update
2009-06-25 00:00:00
osv
osv
kdelibs - several vulnerabilities
2009-08-19 00:00:00
kde4libs - several vulnerabilities
2009-08-19 00:00:00
qt4-x11 - several vulnerabilities
2010-02-02 00:00:00
debian
debian
[SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities
2009-08-19 12:33:02
[SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities
2009-08-19 12:33:14
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
2010-02-02 22:44:05
centos
centos
kdelibs security update
2009-06-26 14:03:32
oraclelinux
oraclelinux
kdelibs security update
2009-06-25 00:00:00
ubuntu
ubuntu
KDE-Libs vulnerabilities
2009-08-24 00:00:00
WebKit vulnerabilities
2009-09-23 00:00:00
Qt vulnerabilities
2009-11-10 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: kdelibs3-3.5.10-13.fc11
2009-07-28 18:27:35
[SECURITY] Fedora 10 Update: kdelibs3-3.5.10-13.fc10
2009-07-28 18:28:27
[SECURITY] Fedora 10 Update: kdelibs3-3.5.10-13.fc10.1
2009-09-09 01:50:21
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

JSON
Related for CVE-2009-1690
prion1securityvulns2nvd1debiancve1ubuntucve1cvelist1veracode1nessus25chrome1altlinux1openvas37redhat1osv4debian5centos1oraclelinux1ubuntu3fedora6seebug1