CVE-2009-0945: CVE-2009-0945

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-0945

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Apple Safari WebKit内存破坏漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Safari是苹果操作系统中所默认捆绑的WEB浏览器。 Safari中WebKit处理SVGList对象时存在内存破坏漏洞，访问恶意网站就会导致执行任意代码。 Safari处理feed: URL中存在多个输入验证错误，访问恶意的feed: URL就会导致执行任意JavaScript。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2009-0945

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2009-0945

Please Login to view more intelligence information

http://support.apple.com/kb/HT3639x_refsource_CONFIRM
http://code.google.com/p/chromium/issues/detail?id=9019x_refsource_CONFIRM
http://support.apple.com/kb/HT3550x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.htmlx_refsource_CONFIRM
http://support.apple.com/kb/HT3549x_refsource_CONFIRM
http://secunia.com/advisories/35056third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36790third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35805third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36461third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/43068third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36062third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35576third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/35074third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/37746third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/34924vdb-entryx_refsource_BID
http://secunia.com/advisories/35095third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1022207vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2009/dsa-1950vendor-advisoryx_refsource_DEBIAN
https://usn.ubuntu.com/823-1/vendor-advisoryx_refsource_UBUNTU
http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlthird-party-advisoryx_refsource_CERT
http://www.ubuntu.com/usn/USN-822-1vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-857-1vendor-advisoryx_refsource_UBUNTU
http://www.ubuntu.com/usn/USN-836-1vendor-advisoryx_refsource_UBUNTU
http://www.vupen.com/english/advisories/2009/1621vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1297vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1321vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2009/1298vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2011/0212vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2009-1130.htmlvendor-advisoryx_refsource_REDHAT
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.htmlvendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlvendor-advisoryx_refsource_SUSE
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.htmlvendor-advisoryx_refsource_FEDORA
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.htmlvendor-advisoryx_refsource_FEDORA
http://lists.apple.com/archives/security-announce/2009/May/msg00000.htmlvendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlvendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/May/msg00001.htmlvendor-advisoryx_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlvendor-advisoryx_refsource_APPLE
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584vdb-entrysignaturex_refsource_OVAL
https://exchange.xforce.ibmcloud.com/vulnerabilities/50477vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/503594/100/0/threadedmailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2009-0945

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2009-0945

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2009-0945

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2009-0945

III. Intelligence Information for CVE-2009-0945

IV. Related Vulnerabilities

V. Comments for CVE-2009-0945

Leave a comment