Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-1687
HistoryJun 10, 2009 - 2:30 p.m.

CVE-2009-1687

2009-06-1014:30:00
CWE-399
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an “offset of a NULL pointer.”

Affected configurations

NVD
Node
applesafariRange≤4.0_betamac
OR
applesafariMatch0.8mac
OR
applesafariMatch0.9mac
OR
applesafariMatch1.0mac
OR
applesafariMatch1.0.3mac
OR
applesafariMatch1.1mac
OR
applesafariMatch1.2mac
OR
applesafariMatch1.3mac
OR
applesafariMatch1.3.1mac
OR
applesafariMatch1.3.2mac
OR
applesafariMatch2.0mac
OR
applesafariMatch2.0.2mac
OR
applesafariMatch2.0.4mac
OR
applesafariMatch3.0mac
OR
applesafariMatch3.0.2-mac
OR
applesafariMatch3.0.3mac
OR
applesafariMatch3.0.4mac
OR
applesafariMatch3.1mac
OR
applesafariMatch3.1.1mac
OR
applesafariMatch3.1.2mac
OR
applesafariMatch3.2.1mac
OR
applesafariMatch3.2.3mac
Node
applesafariRange≤3.2.3windows
OR
applesafariMatch3.0windows
OR
applesafariMatch3.0.1windows
OR
applesafariMatch3.0.2windows
OR
applesafariMatch3.0.3windows
OR
applesafariMatch3.0.4windows
OR
applesafariMatch3.1windows
OR
applesafariMatch3.1.1windows
OR
applesafariMatch3.1.2windows
OR
applesafariMatch3.2-windows
OR
applesafariMatch3.2.1windows
OR
applesafariMatch3.2.2windows

References

Related

ubuntucve 1
cvelist 1
debiancve 1
veracode 1
cve 1
prion 1
openvas 41
redhat 1
osv 4
debian 5
nessus 23
oraclelinux 1
centos 1
ubuntu 3
fedora 10
seebug 1
ubuntucve
ubuntucve
CVE-2009-1687
2009-06-10 00:00:00
cvelist
cvelist
CVE-2009-1687
2009-06-10 14:00:00
debiancve
debiancve
CVE-2009-1687
2009-06-10 14:30:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:39:13
cve
cve
CVE-2009-1687
2009-06-10 14:30:00
prion
prion
Null pointer dereference
2009-06-10 14:30:00
openvas
openvas
CentOS Update for kdelibs CESA-2009:1127 centos5 i386
2011-08-09 00:00:00
CentOS Security Advisory CESA-2009:1127 (kdelibs)
2009-06-30 00:00:00
RedHat Security Advisory RHSA-2009:1127
2009-06-30 00:00:00
redhat
redhat
(RHSA-2009:1127) Critical: kdelibs security update
2009-06-25 00:00:00
osv
osv
kdelibs - several vulnerabilities
2009-08-19 00:00:00
kde4libs - several vulnerabilities
2009-08-19 00:00:00
qt4-x11 - several vulnerabilities
2010-02-02 00:00:00
debian
debian
[SECURITY] [DSA 1867-1] New kdelibs packages fix several vulnerabilities
2009-08-19 12:33:02
[SECURITY] [DSA 1868-1] New kde4libs packages fix several vulnerabilities
2009-08-19 12:33:14
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities
2010-02-02 22:44:05
nessus
nessus
Scientific Linux Security Update : kdelibs on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
openSUSE Security Update : kdelibs3 (openSUSE-SU-2010:1034-1)
2011-05-05 00:00:00
Oracle Linux 4 / 5 : kdelibs (ELSA-2009-1127)
2013-07-12 00:00:00
oraclelinux
oraclelinux
kdelibs security update
2009-06-25 00:00:00
centos
centos
kdelibs security update
2009-06-26 14:03:32
ubuntu
ubuntu
KDE-Libs vulnerabilities
2009-08-24 00:00:00
WebKit vulnerabilities
2009-09-23 00:00:00
Qt vulnerabilities
2009-11-10 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: kdelibs3-3.5.10-13.fc11
2009-07-28 18:27:35
[SECURITY] Fedora 11 Update: kdelibs-4.3.1-3.fc11
2009-09-15 07:39:23
[SECURITY] Fedora 10 Update: kdelibs3-3.5.10-13.fc10
2009-07-28 18:28:27
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.8%

JSON
Related for NVD:CVE-2009-1687
ubuntucve1cvelist1debiancve1veracode1cve1prion1openvas41redhat1osv4debian5nessus23oraclelinux1centos1ubuntu3fedora10seebug1