CVE-2009-0945

13.05.2009, 17:30

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

Code Injection

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.3 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 94%

Affected Products (NVD)

Vendor	Product	Version
apple	safari	𝑥 ≤ 3.2.2
apple	safari	0.8
apple	safari	0.9
apple	safari	1.0
apple	safari	1.0:beta
apple	safari	1.0:beta2
apple	safari	1.0.0
apple	safari	1.0.0b1:b1
apple	safari	1.0.0b2:b2
apple	safari	1.0.1
apple	safari	1.0.2
apple	safari	1.0.3
apple	safari	1.0.3:85.8
apple	safari	1.0.3:85.8.1
apple	safari	1.1
apple	safari	1.1.0
apple	safari	1.1.1
apple	safari	1.2
apple	safari	1.2.0
apple	safari	1.2.1
apple	safari	1.2.2
apple	safari	1.2.3
apple	safari	1.2.4
apple	safari	1.2.5
apple	safari	1.3
apple	safari	1.3.0
apple	safari	1.3.1
apple	safari	1.3.2
apple	safari	1.3.2:312.5
apple	safari	1.3.2:312.6
apple	safari	2.0
apple	safari	2.0.0
apple	safari	2.0.1
apple	safari	2.0.2
apple	safari	2.0.3
apple	safari	2.0.3:417.8
apple	safari	2.0.3:417.9
apple	safari	2.0.3:417.9.2
apple	safari	2.0.4
apple	safari	3.0
apple	safari	3.0.0
apple	safari	3.0.1
apple	safari	3.0.2
apple	safari	3.0.3
apple	safari	3.0.4
apple	safari	3.1
apple	safari	3.1.0
apple	safari	3.1.1
apple	safari	3.1.2
apple	safari	3.2
apple	safari	3.2.0
apple	safari	3.2.1
apple	safari	4.0:beta

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

kde4libs

dapper	dne
hardy	not-affected
intrepid	not-affected
jaunty	Fixed 4:4.2.2-0ubuntu5.1 released
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected

kdegraphics

dapper	ignored
hardy	Fixed 4:3.5.10-0ubuntu1~hardy1.1 released
intrepid	not-affected
jaunty	not-affected
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected

kdelibs

dapper	not-affected
hardy	not-affected
intrepid	not-affected
jaunty	not-affected
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected

qt4-x11

dapper	not-affected
hardy	not-affected
intrepid	Fixed 4.4.3-0ubuntu1.4 released
jaunty	Fixed 4.5.0-0ubuntu4.3 released
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected

webkit

dapper	dne
hardy	ignored
intrepid	Fixed 1.0.1-2ubuntu0.2 released
jaunty	Fixed 1.0.1-4ubuntu0.1 released
karmic	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

libqt4

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-32bit

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-qt3support

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-qt3support-32bit

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-32bit

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-mysql

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-mysql-32bit

suse enterprise desktop 12	4.8.6-2.6 fixed
suse enterprise desktop 12 SP1	4.8.6-4.1 fixed
suse enterprise desktop 12 SP2	4.8.6-7.1 fixed
suse enterprise desktop 12 SP3	4.8.6-7.1 fixed
suse enterprise desktop 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12	4.8.6-2.6 fixed
suse enterprise sap 12 SP1	4.8.6-4.1 fixed
suse enterprise sap 12 SP2	4.8.6-7.1 fixed
suse enterprise sap 12 SP3	4.8.6-7.1 fixed
suse enterprise sap 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12	4.8.6-2.6 fixed
suse enterprise server 12 SP1	4.8.6-4.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed
suse enterprise workstation 12	4.8.6-2.6 fixed
suse enterprise workstation 12 SP1	4.8.6-4.1 fixed
suse enterprise workstation 12 SP2	4.8.6-7.1 fixed
suse enterprise workstation 12 SP3	4.8.6-7.1 fixed
suse enterprise workstation 12 SP4	4.8.7-8.8.1 fixed
suse enterprise workstation 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-postgresql

suse enterprise desktop 12	4.8.6-2.6 fixed
suse enterprise desktop 12 SP1	4.8.6-4.1 fixed
suse enterprise desktop 12 SP2	4.8.6-7.1 fixed
suse enterprise desktop 12 SP3	4.8.6-7.1 fixed
suse enterprise desktop 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12	4.8.6-2.6 fixed
suse enterprise sap 12 SP1	4.8.6-4.1 fixed
suse enterprise sap 12 SP2	4.8.6-7.1 fixed
suse enterprise sap 12 SP3	4.8.6-7.1 fixed
suse enterprise sap 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12	4.8.6-2.6 fixed
suse enterprise server 12 SP1	4.8.6-4.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed
suse enterprise workstation 12	4.8.6-2.6 fixed
suse enterprise workstation 12 SP1	4.8.6-4.1 fixed
suse enterprise workstation 12 SP2	4.8.6-7.1 fixed
suse enterprise workstation 12 SP3	4.8.6-7.1 fixed
suse enterprise workstation 12 SP4	4.8.7-8.8.1 fixed
suse enterprise workstation 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-postgresql-32bit

suse enterprise desktop 12	4.8.6-2.6 fixed
suse enterprise desktop 12 SP1	4.8.6-4.1 fixed
suse enterprise desktop 12 SP2	4.8.6-7.1 fixed
suse enterprise desktop 12 SP3	4.8.6-7.1 fixed
suse enterprise desktop 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12	4.8.6-2.6 fixed
suse enterprise sap 12 SP1	4.8.6-4.1 fixed
suse enterprise sap 12 SP2	4.8.6-7.1 fixed
suse enterprise sap 12 SP3	4.8.6-7.1 fixed
suse enterprise sap 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12	4.8.6-2.6 fixed
suse enterprise server 12 SP1	4.8.6-4.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed
suse enterprise workstation 12	4.8.6-2.6 fixed
suse enterprise workstation 12 SP1	4.8.6-4.1 fixed
suse enterprise workstation 12 SP2	4.8.6-7.1 fixed
suse enterprise workstation 12 SP3	4.8.6-7.1 fixed
suse enterprise workstation 12 SP4	4.8.7-8.8.1 fixed
suse enterprise workstation 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-sqlite

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-sqlite-32bit

suse enterprise desktop 12	4.8.6-2.11 fixed
suse enterprise desktop 12 SP1	4.8.6-4.2 fixed
suse enterprise desktop 12 SP2	4.8.6-7.1 fixed
suse enterprise desktop 12 SP3	4.8.6-7.1 fixed
suse enterprise desktop 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12	4.8.6-2.11 fixed
suse enterprise sap 12 SP1	4.8.6-4.2 fixed
suse enterprise sap 12 SP2	4.8.6-7.1 fixed
suse enterprise sap 12 SP3	4.8.6-7.1 fixed
suse enterprise sap 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12	4.8.6-2.11 fixed
suse enterprise server 12 SP1	4.8.6-4.2 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed
suse enterprise workstation 12	4.8.6-2.11 fixed
suse enterprise workstation 12 SP1	4.8.6-4.2 fixed
suse enterprise workstation 12 SP2	4.8.6-7.1 fixed
suse enterprise workstation 12 SP3	4.8.6-7.1 fixed
suse enterprise workstation 12 SP4	4.8.7-8.8.1 fixed
suse enterprise workstation 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-unixODBC

suse enterprise desktop 12	4.8.6-2.6 fixed
suse enterprise desktop 12 SP1	4.8.6-4.1 fixed
suse enterprise desktop 12 SP2	4.8.6-7.1 fixed
suse enterprise desktop 12 SP3	4.8.6-7.1 fixed
suse enterprise desktop 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12	4.8.6-2.6 fixed
suse enterprise sap 12 SP1	4.8.6-4.1 fixed
suse enterprise sap 12 SP2	4.8.6-7.1 fixed
suse enterprise sap 12 SP3	4.8.6-7.1 fixed
suse enterprise sap 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12	4.8.6-2.6 fixed
suse enterprise server 12 SP1	4.8.6-4.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed
suse enterprise workstation 12	4.8.6-2.6 fixed
suse enterprise workstation 12 SP1	4.8.6-4.1 fixed
suse enterprise workstation 12 SP2	4.8.6-7.1 fixed
suse enterprise workstation 12 SP3	4.8.6-7.1 fixed
suse enterprise workstation 12 SP4	4.8.7-8.8.1 fixed
suse enterprise workstation 12 SP5	4.8.7-8.8.1 fixed

libqt4-sql-unixODBC-32bit

suse enterprise desktop 12	4.8.6-2.6 fixed
suse enterprise desktop 12 SP1	4.8.6-4.1 fixed
suse enterprise desktop 12 SP2	4.8.6-7.1 fixed
suse enterprise desktop 12 SP3	4.8.6-7.1 fixed
suse enterprise desktop 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12	4.8.6-2.6 fixed
suse enterprise sap 12 SP1	4.8.6-4.1 fixed
suse enterprise sap 12 SP2	4.8.6-7.1 fixed
suse enterprise sap 12 SP3	4.8.6-7.1 fixed
suse enterprise sap 12 SP4	4.8.7-8.8.1 fixed
suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12	4.8.6-2.6 fixed
suse enterprise server 12 SP1	4.8.6-4.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed
suse enterprise workstation 12	4.8.6-2.6 fixed
suse enterprise workstation 12 SP1	4.8.6-4.1 fixed
suse enterprise workstation 12 SP2	4.8.6-7.1 fixed
suse enterprise workstation 12 SP3	4.8.6-7.1 fixed
suse enterprise workstation 12 SP4	4.8.7-8.8.1 fixed
suse enterprise workstation 12 SP5	4.8.7-8.8.1 fixed

libqt4-x11

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

libqt4-x11-32bit

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.1 fixed
suse enterprise server 12 SP3	4.8.6-7.1 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed

qt4-x11-tools

suse enterprise sap 12 SP5	4.8.7-8.8.1 fixed
suse enterprise server 12 SP2	4.8.6-7.3 fixed
suse enterprise server 12 SP3	4.8.6-7.3 fixed
suse enterprise server 12 SP4	4.8.7-8.8.1 fixed
suse enterprise server 12 SP5	4.8.7-8.8.1 fixed