ByteOS Network

CVE Vulnerability Details :

CVE-2009-0945

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-13 May, 2009 | 17:00

Updated At-07 Aug, 2024 | 04:57

▼CVE Numbering Authority (CNA)

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.ubuntu.com/usn/USN-822-1	vendor-advisory x_refsource_UBUNTU
http://secunia.com/advisories/35805	third-party-advisory x_refsource_SECUNIA
http://support.apple.com/kb/HT3639	x_refsource_CONFIRM
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html	vendor-advisory x_refsource_FEDORA
http://www.vupen.com/english/advisories/2009/1621	vdb-entry x_refsource_VUPEN
http://support.apple.com/kb/HT3549	x_refsource_CONFIRM
http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN
http://www.securitytracker.com/id?1022207	vdb-entry x_refsource_SECTRACK
http://www.securityfocus.com/archive/1/503594/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2009-1130.html	vendor-advisory x_refsource_REDHAT
http://www.vupen.com/english/advisories/2009/1298	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/35576	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/35074	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/37746	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/36790	third-party-advisory x_refsource_SECUNIA
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	vendor-advisory x_refsource_APPLE
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html	vendor-advisory x_refsource_APPLE
http://secunia.com/advisories/35056	third-party-advisory x_refsource_SECUNIA
http://www.zerodayinitiative.com/advisories/ZDI-09-022	x_refsource_MISC
http://www.securityfocus.com/bid/34924	vdb-entry x_refsource_BID
http://secunia.com/advisories/36461	third-party-advisory x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/50477	vdb-entry x_refsource_XF
http://lists.apple.com/archives/security-announce/2009/May/msg00000.html	vendor-advisory x_refsource_APPLE
https://usn.ubuntu.com/823-1/	vendor-advisory x_refsource_UBUNTU
http://www.debian.org/security/2009/dsa-1950	vendor-advisory x_refsource_DEBIAN
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/36062	third-party-advisory x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-857-1	vendor-advisory x_refsource_UBUNTU
http://lists.apple.com/archives/security-announce/2009/May/msg00001.html	vendor-advisory x_refsource_APPLE
http://www.us-cert.gov/cas/techalerts/TA09-133A.html	third-party-advisory x_refsource_CERT
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584	vdb-entry signature x_refsource_OVAL
http://www.vupen.com/english/advisories/2009/1297	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/35095	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html	vendor-advisory x_refsource_FEDORA
http://support.apple.com/kb/HT3550	x_refsource_CONFIRM
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html	vendor-advisory x_refsource_FEDORA
http://www.ubuntu.com/usn/USN-836-1	vendor-advisory x_refsource_UBUNTU
http://www.vupen.com/english/advisories/2009/1321	vdb-entry x_refsource_VUPEN
http://code.google.com/p/chromium/issues/detail?id=9019	x_refsource_CONFIRM

Hyperlink: http://www.ubuntu.com/usn/USN-822-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://secunia.com/advisories/35805

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://support.apple.com/kb/HT3639

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/43068

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.vupen.com/english/advisories/2009/1621

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://support.apple.com/kb/HT3549

Resource:

x_refsource_CONFIRM

Hyperlink: http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securitytracker.com/id?1022207

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/archive/1/503594/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1130.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.vupen.com/english/advisories/2009/1298

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/35576

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/35074

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/37746

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/36790

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://secunia.com/advisories/35056

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-09-022

Resource:

x_refsource_MISC

Hyperlink: http://www.securityfocus.com/bid/34924

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://secunia.com/advisories/36461

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/50477

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://lists.apple.com/archives/security-announce/2009/May/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: https://usn.ubuntu.com/823-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.debian.org/security/2009/dsa-1950

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/36062

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.ubuntu.com/usn/USN-857-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://lists.apple.com/archives/security-announce/2009/May/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Resource:

third-party-advisory

x_refsource_CERT

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://www.vupen.com/english/advisories/2009/1297

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/35095

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://support.apple.com/kb/HT3550

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.ubuntu.com/usn/USN-836-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://www.vupen.com/english/advisories/2009/1321

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=9019

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.ubuntu.com/usn/USN-822-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/35805	third-party-advisory x_refsource_SECUNIA x_transferred
http://support.apple.com/kb/HT3639	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/43068	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.vupen.com/english/advisories/2009/1621	vdb-entry x_refsource_VUPEN x_transferred
http://support.apple.com/kb/HT3549	x_refsource_CONFIRM x_transferred
http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0212	vdb-entry x_refsource_VUPEN x_transferred
http://www.securitytracker.com/id?1022207	vdb-entry x_refsource_SECTRACK x_transferred
http://www.securityfocus.com/archive/1/503594/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://www.redhat.com/support/errata/RHSA-2009-1130.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.vupen.com/english/advisories/2009/1298	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/35576	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/35074	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/37746	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/36790	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html	vendor-advisory x_refsource_APPLE x_transferred
http://lists.apple.com/archives/security-announce/2009/May/msg00002.html	vendor-advisory x_refsource_APPLE x_transferred
http://secunia.com/advisories/35056	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.zerodayinitiative.com/advisories/ZDI-09-022	x_refsource_MISC x_transferred
http://www.securityfocus.com/bid/34924	vdb-entry x_refsource_BID x_transferred
http://secunia.com/advisories/36461	third-party-advisory x_refsource_SECUNIA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/50477	vdb-entry x_refsource_XF x_transferred
http://lists.apple.com/archives/security-announce/2009/May/msg00000.html	vendor-advisory x_refsource_APPLE x_transferred
https://usn.ubuntu.com/823-1/	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.debian.org/security/2009/dsa-1950	vendor-advisory x_refsource_DEBIAN x_transferred
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/36062	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.ubuntu.com/usn/USN-857-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://lists.apple.com/archives/security-announce/2009/May/msg00001.html	vendor-advisory x_refsource_APPLE x_transferred
http://www.us-cert.gov/cas/techalerts/TA09-133A.html	third-party-advisory x_refsource_CERT x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584	vdb-entry signature x_refsource_OVAL x_transferred
http://www.vupen.com/english/advisories/2009/1297	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/35095	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html	vendor-advisory x_refsource_FEDORA x_transferred
http://support.apple.com/kb/HT3550	x_refsource_CONFIRM x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.ubuntu.com/usn/USN-836-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://www.vupen.com/english/advisories/2009/1321	vdb-entry x_refsource_VUPEN x_transferred
http://code.google.com/p/chromium/issues/detail?id=9019	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-822-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://secunia.com/advisories/35805

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://support.apple.com/kb/HT3639

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/43068

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1621

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://support.apple.com/kb/HT3549

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0212

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securitytracker.com/id?1022207

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.securityfocus.com/archive/1/503594/100/0/threaded

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1130.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1298

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/35576

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/35074

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/37746

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/36790

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://secunia.com/advisories/35056

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.zerodayinitiative.com/advisories/ZDI-09-022

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://www.securityfocus.com/bid/34924

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://secunia.com/advisories/36461

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/50477

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2009/May/msg00000.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: https://usn.ubuntu.com/823-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.debian.org/security/2009/dsa-1950

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://secunia.com/advisories/36062

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-857-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://lists.apple.com/archives/security-announce/2009/May/msg00001.html

Resource:

vendor-advisory

x_refsource_APPLE

x_transferred

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Resource:

third-party-advisory

x_refsource_CERT

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1297

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/35095

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://support.apple.com/kb/HT3550

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-836-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1321

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=9019

Resource:

x_refsource_CONFIRM

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References