WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Oct 8, 2014 | Jun 10, 2009 |
| Apple Safari | — | Upgrade to Apple Safari version 4.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Jun 10, 2009 |
| Centos_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibsUpgrade kdelibs-devel | Dec 1, 2016 | Jun 10, 2009 |
| Oracle_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibsUpgrade kdelibs-devel | Oct 16, 2024 | Jun 10, 2009 |
| Suse | — | Upgrade kdelibs3-arts-64bitUpgrade kdelibs3-32bitUpgrade kdelibs3-arts-32bitUpgrade kdelibs3-default-styleUpgrade kdelibs3-docUpgrade kdelibs3-artsUpgrade kdelibs3-develUpgrade libwebkit-develUpgrade libwebkit-1_0-2Upgrade kdelibs3-64bitUpgrade libwebkit-langUpgrade libwebkit-1_0-2-32bitUpgrade kdelibs3-default-style-64bitUpgrade webkit-jscUpgrade kdelibs3Upgrade kdelibs3-default-style-32bit | Feb 17, 2015 | Jun 10, 2009 |
| Ubuntu | — | Upgrade kdelibs5Upgrade libqt4-webkitUpgrade libwebkit-1.0-1Upgrade libwebkit-1.0-1-dbgUpgrade kdelibs4c2aUpgrade libwebkit-dev | Nov 8, 2024 | Jun 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub