CVE-2009-1692

Published: Jun 19, 2009Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.

Affected (20)

Products: Apple: Iphone Os, Ipod Touch, Safari

3 products

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Version 1.0.0
Apple Iphone Os	Version 1.0.1
Apple Iphone Os	Version 1.0.2
Apple Iphone Os	All versions

Configuration B

15 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Version 1.1.0
Apple Iphone Os	Version 1.1.1
Apple Iphone Os	Version 1.1.2
Apple Iphone Os	Version 1.1.3
Apple Iphone Os	Version 1.1.4
Apple Iphone Os	Version 1.1.5
Apple Iphone Os	Version 2.0.0
Apple Iphone Os	Version 2.0.1
Apple Iphone Os	Version 2.0.2
Apple Iphone Os	Version 2.0
Apple Iphone Os	Version 2.1.1
Apple Iphone Os	Version 2.1
Apple Iphone Os	Version 2.2.1
Apple Iphone Os	Version 2.2
Apple Ipod Touch	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Apple Safari	All versions

Related CWEs

References (40)

http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: cve@mitre.org

http://osvdb.org/55242

Source: cve@mitre.org

http://secunia.com/advisories/36977

Source: cve@mitre.org

http://secunia.com/advisories/37746

Source: cve@mitre.org

http://secunia.com/advisories/43068

Source: cve@mitre.org

http://support.apple.com/kb/HT3639

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2009/dsa-1950

Source: cve@mitre.org

http://www.g-sec.lu/one-bug-to-rule-them-all.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/504969/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/504988/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/504989/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/505006/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/35414

Source: cve@mitre.org

http://www.securityfocus.com/bid/35446

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1621

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2011/0212

Source: cve@mitre.org

https://bugs.webkit.org/show_bug.cgi?id=23319

Source: cve@mitre.org

https://www.exploit-db.com/exploits/9160

Source: cve@mitre.org

http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#121

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/55242

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36977

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/37746

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/43068

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3639

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.debian.org/security/2009/dsa-1950

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.g-sec.lu/one-bug-to-rule-them-all.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/504969/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/504988/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/504989/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/505006/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/35414

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/35446

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/1621

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2011/0212

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.webkit.org/show_bug.cgi?id=23319

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/9160

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.