CVE-2009-1709
10.06.2009, 18:00
Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."Enginsight
| Vendor | Product | Version |
|---|---|---|
| apple | safari | 𝑥 ≤ 4.0_beta |
| apple | safari | 0.8 |
| apple | safari | 0.9 |
| apple | safari | 1.0 |
| apple | safari | 1.0.3 |
| apple | safari | 1.1 |
| apple | safari | 1.2 |
| apple | safari | 1.3 |
| apple | safari | 1.3.1 |
| apple | safari | 1.3.2 |
| apple | safari | 2.0 |
| apple | safari | 2.0.2 |
| apple | safari | 2.0.4 |
| apple | safari | 3.0 |
| apple | safari | 3.0.2 |
| apple | safari | 3.0.3 |
| apple | safari | 3.0.4 |
| apple | safari | 3.1 |
| apple | safari | 3.1.1 |
| apple | safari | 3.1.2 |
| apple | safari | 3.2.1 |
| apple | safari | 3.2.3 |
| apple | safari | 𝑥 ≤ 3.2.3 |
| apple | safari | 3.0 |
| apple | safari | 3.0.1 |
| apple | safari | 3.0.2 |
| apple | safari | 3.0.3 |
| apple | safari | 3.0.4 |
| apple | safari | 3.1 |
| apple | safari | 3.1.1 |
| apple | safari | 3.1.2 |
| apple | safari | 3.2 |
| apple | safari | 3.2.1 |
| apple | safari | 3.2.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| kde4libs |
| ||||||||
| kdegraphics |
| ||||||||
| qt4-x11 |
| ||||||||
| webkit |
|
Common Weakness Enumeration
References