Lucene search
HistoryJun 10, 2009 - 6:00 p.m.
CVE-2009-1705
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.028
Percentile
90.8%
CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.
Affected configurations
Node
applesafariRange≤3.2.3-windows
ORapplesafariMatch3.0-windows
ORapplesafariMatch3.0.1-windows
ORapplesafariMatch3.0.2-windows
ORapplesafariMatch3.0.3-windows
ORapplesafariMatch3.0.4-windows
ORapplesafariMatch3.1-windows
ORapplesafariMatch3.1.1-windows
ORapplesafariMatch3.1.2-windows
ORapplesafariMatch3.2-windows
ORapplesafariMatch3.2.1-windows
ORapplesafariMatch3.2.2-windows
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:-:windows:*:*:*:*:* |
| apple | safari | 3.0 | cpe:2.3:a:apple:safari:3.0:-:windows:*:*:*:*:* |
| apple | safari | 3.0.1 | cpe:2.3:a:apple:safari:3.0.1:-:windows:*:*:*:*:* |
| apple | safari | 3.0.2 | cpe:2.3:a:apple:safari:3.0.2:-:windows:*:*:*:*:* |
| apple | safari | 3.0.3 | cpe:2.3:a:apple:safari:3.0.3:-:windows:*:*:*:*:* |
| apple | safari | 3.0.4 | cpe:2.3:a:apple:safari:3.0.4:-:windows:*:*:*:*:* |
| apple | safari | 3.1 | cpe:2.3:a:apple:safari:3.1:-:windows:*:*:*:*:* |
| apple | safari | 3.1.1 | cpe:2.3:a:apple:safari:3.1.1:-:windows:*:*:*:*:* |
| apple | safari | 3.1.2 | cpe:2.3:a:apple:safari:3.1.2:-:windows:*:*:*:*:* |
| apple | safari | 3.2 | cpe:2.3:a:apple:safari:3.2:-:windows:*:*:*:*:* |
Related
prion
prion
Memory corruption
2009-06-10 18:00:00
cve
cve
CVE-2009-1705
2009-06-10 18:00:00
cvelist
cvelist
CVE-2009-1705
2009-06-10 17:37:00
openvas
openvas
Apple Safari Multiple Vulnerabilities June-09 (Windows) - I
2009-06-16 00:00:00
Apple Safari Multiple Vulnerabilities - 01 - (Jun 2009) - Windows
2009-06-16 00:00:00
seebug
seebug
Apple Safari 4.0多个安全漏洞
2009-06-11 00:00:00
nessus
nessus
Safari < 4.0 Multiple Vulnerabilities
2009-06-09 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
High
EPSS
0.028
Percentile
90.8%
Related for NVD:CVE-2009-1705