CVE-2009-5098

Published: Sep 13, 2011Modified: Apr 29, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service (crash) via a web page containing a long string following a refresh tag, which triggers a floating point exception.

Affected (4)

Products: Hp: Palm Pre Webos

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Hp Palm Pre Webos	Up to 1.1.0
Hp Palm Pre Webos	Version 1.0.2
Hp Palm Pre Webos	Version 1.0.3
Hp Palm Pre Webos	Version 1.0.4

Related CWEs

References (10)

http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12

Source: cve@mitre.org

http://secunia.com/advisories/36936

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/8373

Source: cve@mitre.org

http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-version-11-floating.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/507126/100/0/threaded

Source: cve@mitre.org

http://kb.palm.com/wps/portal/kb/na/pre/p100eww/sprint/solutions/article/50607_en.html#12

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36936

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/8373

Source: af854a3a-2127-422b-91ae-364da2661108

http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-version-11-floating.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/507126/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.