Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2009-1692 State: PUBLISHED Published: 2009-06-19T16:00:00 Last Updated: 2024-08-07T05:20:35.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35446 - https://www.exploit-db.com/exploits/9160 - http://support.ap
ner: References: - http://www.securityfocus.com/bid/35446 - https://www.exploit-db.com/exploits/9160 - http://support.apple.com/kb/HT3639 - http://www.g-sec.lu/one-bug-to-rule-them-all.html - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121 - http://www.securityfocus.com/bid/35414 - http://www.securityfocus.com/archive/1/504988/100/0/threaded - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://secunia.com/advisories/36977 - http://www.debian.
s.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://secunia.com/advisories/36977 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.securityfocus.com/archive/1/505006/100/0/threaded - http://osvdb.org/55242 - http://www.securityfocus.com/archive/1/504969/100/0/threaded - https://bugs.webkit.org/show_bug.cgi?id=23319 - http://www.securityfocus.com/archive/1/504989/100/0/threaded
CVE ID: CVE-2009-1693 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to read images from arbitrary web sites via a CANVAS element with an SVG image, related to a "cross-site image capture issue." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/arc
.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://osvdb.org/55004 - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/35331 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1694 State: PUBLISHED Published: 2009-06-10T14:00:00 Last Updated: 2024-08-07T05:20:35.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read images from arbitrary web sites via vectors involving a CANVAS element and redirection, related to a "cross-site image capture issue." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com
/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://osvdb.org/55005 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/35322 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1695 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page transition. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/162
p://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.securityfocus.com/bid/35328 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://osvdb.org/54991 - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.
ts.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1696 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://osvdb.org/55027 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/20
http://osvdb.org/55027 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1697 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - ht
Host header. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
tp://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://osvdb.org/54992 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1698 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-822-1 - http://support.apple.com/kb/HT
alyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-822-1 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html - http://www.mandriva.com/security/advisories?name=MDVSA-2009:330 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://secunia.com/advisories/35588 - http://www.securityfocus.com/bid/35260 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.vupen.com/english/advisories/2009/15
ww.redhat.com/archives/fedora-package-announce/2009-July/msg01199.html - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/37746 - http://www.zerodayinitiative.com/advisories/ZDI-09-032/ - http://securitytracker.com/id?1022345 - http://secunia.com/advisories/36790 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.securityfocus.com/archive/1/504173/100/0/threaded - http://www.securityfocus.com/archive/1/504295/100/0/threaded - http://www.debian.org/security/2009/dsa-1950 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://www.redhat.com/support/errata/RHSA-2009-1128.html - http://secunia.co
e-security-announce/2011-01/msg00006.html - http://www.redhat.com/support/errata/RHSA-2009-1128.html - http://secunia.com/advisories/35379 - http://osvdb.org/55006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9484 - http://secunia.com/advisories/36062 - http://www.ubuntu.com/usn/USN-857-1 - http://secunia.com/advisories/36057 - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html - http://support.apple.com/kb/HT3613 - http://www.ubuntu.com/usn/USN-836-1 - http://www.securityfocus.com/bid/35318 - http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html - https://www.redhat.com/archives/fedora-package-announce/2
log.zoller.lu/2009/05/advisory-apple-safari-remote-code.html - https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01200.html
CVE ID: CVE-2009-1699 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an "XXE attack." Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/engl
iner: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - https://www.exploit-db.com/exploits/8907 - http://www.vupen.com/english/advisories/2011/0212 - http://scary.beasts.org/security/CESA-2009-006.html - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://osvdb.org/54972 - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.ubuntu.com
nsuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.ubuntu.com/usn/USN-857-1 - http://www.securityfocus.com/bid/35321 - http://scarybeastsecurity.blogspot.com/2009/06/apples-safari-4-fixes-local-file-theft.html - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1700 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.ap
http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://osvdb.org/54973 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1701 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories
Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://osvdb.org/55008 - http://www.vupen.com/english/advisories/2009/1522 - http://securitytracker.com/id?1022345 - http://www.securityfocus.com/archive/1/504172/100/0/threaded - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/
009/Jun/msg00005.html - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://www.zerodayinitiative.com/advisories/ZDI-09-033/ - http://support.apple.com/kb/HT3613 - http://www.securityfocus.com/bid/35325
CVE ID: CVE-2009-1702 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1022344 - http://support.apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://w
apple.com/kb/HT3639 - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2009/1621 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://osvdb.org/54993 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html - http://www.securityfocus.com/bid/35327 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1703 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/43068 - http://www.vupen.com/english/advisories/2011/0212 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories
urity-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://osvdb.org/55009 - http://www.securityfocus.com/bid/35333
CVE ID: CVE-2009-1704 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35344 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://securitytracker.com/id?1022343 - http://www.vupen.com/english/advisories/200
://www.securityfocus.com/bid/35260 - http://securitytracker.com/id?1022343 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/35379 - http://support.apple.com/kb/HT3613 - http://osvdb.org/55010
CVE ID: CVE-2009-1705 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/35308 - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/adv
ves/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://secunia.com/advisories/35379 - http://osvdb.org/54974 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1706 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://
jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://osvdb.org/54997 - http://secunia.com/advisories/35379 - http://www.securityfocus.com/bid/35346 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1707 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.vupen.com/english/advisories/2010/3046 - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://www.securityfocus.com/bid/35352 - http://secunia.com/advisories/35379
ww.vupen.com/english/advisories/2009/1522 - http://www.securityfocus.com/bid/35352 - http://secunia.com/advisories/35379 - http://secunia.com/advisories/42314 - http://support.apple.com/kb/HT4456 - http://support.apple.com/kb/HT3613 - http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html - http://osvdb.org/55012
CVE ID: CVE-2009-1708 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html - http://www.securityfocus.com/bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://securitytracker.com/id?1022345 - http://secunia.c
bid/35260 - http://www.vupen.com/english/advisories/2009/1522 - http://securitytracker.com/id?1022345 - http://secunia.com/advisories/35379 - http://osvdb.org/55011 - http://www.securityfocus.com/bid/35351 - http://support.apple.com/kb/HT3613
CVE ID: CVE-2009-1709 State: PUBLISHED Published: 2009-06-10T17:37:00 Last Updated: 2024-08-07T05:20:35.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches." Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-09-034/ - http://secunia.com/advisories/43068 -