Lucene search
MitreCVE-2009-1705HistoryJun 10, 2009 - 6:00 p.m.
CVE-2009-1705
2009-06-1018:00:00
CWE-189
mitre
web.nvd.nist.gov
25
coregraphics
apple safari
windows
arbitrary code execution
denial of service
font data
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.028
Percentile
90.8%
CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.
Affected configurations
Node
applesafariRange≤3.2.3-windows
ORapplesafariMatch3.0-windows
ORapplesafariMatch3.0.1-windows
ORapplesafariMatch3.0.2-windows
ORapplesafariMatch3.0.3-windows
ORapplesafariMatch3.0.4-windows
ORapplesafariMatch3.1-windows
ORapplesafariMatch3.1.1-windows
ORapplesafariMatch3.1.2-windows
ORapplesafariMatch3.2-windows
ORapplesafariMatch3.2.1-windows
ORapplesafariMatch3.2.2-windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:* |
| apple | safari | 3.0 | cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:* |
| apple | safari | 3.0.1 | cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:* |
| apple | safari | 3.0.2 | cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:* |
| apple | safari | 3.0.3 | cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:* |
| apple | safari | 3.0.4 | cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:* |
| apple | safari | 3.1 | cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:* |
| apple | safari | 3.1.1 | cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:* |
| apple | safari | 3.1.2 | cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:* |
| apple | safari | 3.2 | cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:* |
Related
prion
prion
Memory corruption
2009-06-10 18:00:00
nvd
nvd
CVE-2009-1705
2009-06-10 18:00:00
cvelist
cvelist
CVE-2009-1705
2009-06-10 17:37:00
openvas
openvas
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
2009-06-16 00:00:00
Apple Safari Multiple Vulnerabilities - 01 - (Jun 2009) - Windows
2009-06-16 00:00:00
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00
nessus
nessus
Safari < 4.0 Multiple Vulnerabilities
2009-06-09 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.9
Confidence
High
EPSS
0.028
Percentile
90.8%
Related for CVE-2009-1705