CVE Database
/

CVE-2009-1690

Back to search

CVE-2009-1690

Published: Jun 10, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to "recursion in certain DOM event handlers."

VendorProductVersions

n/a

n/a

affected
n/a

References

USN-822-1
vendor-advisory
x_refsource_UBUNTU
43068
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-8039
vendor-advisory
x_refsource_FEDORA
MDVSA-2009:330
vendor-advisory
x_refsource_MANDRIVA
ADV-2009-1621
vdb-entry
x_refsource_VUPEN
ADV-2011-0212
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:11009
vdb-entry
signature
x_refsource_OVAL
APPLE-SA-2009-06-08-1
vendor-advisory
x_refsource_APPLE
35260
vdb-entry
x_refsource_BID
FEDORA-2009-8046
vendor-advisory
x_refsource_FEDORA
ADV-2009-1522
vdb-entry
x_refsource_VUPEN
37746
third-party-advisory
x_refsource_SECUNIA
1022345
vdb-entry
x_refsource_SECTRACK
36790
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2009-06-17-1
vendor-advisory
x_refsource_APPLE
DSA-1950
vendor-advisory
x_refsource_DEBIAN
SUSE-SR:2011:002
vendor-advisory
x_refsource_SUSE
35379
third-party-advisory
x_refsource_SECUNIA
36062
third-party-advisory
x_refsource_SECUNIA
USN-857-1
vendor-advisory
x_refsource_UBUNTU
36057
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-8049
vendor-advisory
x_refsource_FEDORA
USN-836-1
vendor-advisory
x_refsource_UBUNTU
54990
vdb-entry
x_refsource_OSVDB
FEDORA-2009-8020
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now