Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
21 Nov 2024, 01:03
Type | Values Removed | Values Added |
---|---|---|
References | () http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=803 - | |
References | () http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - Patch, Vendor Advisory | |
References | () http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - Patch, Vendor Advisory | |
References | () http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - | |
References | () http://osvdb.org/54990 - | |
References | () http://secunia.com/advisories/35379 - Vendor Advisory | |
References | () http://secunia.com/advisories/36057 - Vendor Advisory | |
References | () http://secunia.com/advisories/36062 - Vendor Advisory | |
References | () http://secunia.com/advisories/36790 - Vendor Advisory | |
References | () http://secunia.com/advisories/37746 - Vendor Advisory | |
References | () http://secunia.com/advisories/43068 - Vendor Advisory | |
References | () http://securitytracker.com/id?1022345 - Patch | |
References | () http://support.apple.com/kb/HT3613 - Patch, Vendor Advisory | |
References | () http://support.apple.com/kb/HT3639 - Patch, Vendor Advisory | |
References | () http://www.debian.org/security/2009/dsa-1950 - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - | |
References | () http://www.securityfocus.com/bid/35260 - Exploit, Patch | |
References | () http://www.ubuntu.com/usn/USN-822-1 - | |
References | () http://www.ubuntu.com/usn/USN-836-1 - | |
References | () http://www.ubuntu.com/usn/USN-857-1 - | |
References | () http://www.vupen.com/english/advisories/2009/1522 - Patch, Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2009/1621 - Vendor Advisory | |
References | () http://www.vupen.com/english/advisories/2011/0212 - Vendor Advisory | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11009 - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - | |
References | () https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html - |
Information
Published : 2009-06-10 14:30
Updated : 2024-11-21 01:03
NVD link : CVE-2009-1690
Mitre link : CVE-2009-1690
CVE.ORG link : CVE-2009-1690
JSON object : View
Products Affected
apple
- iphone_os
- safari
- chrome
CWE
CWE-399
Resource Management Errors