WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Ios | — | Upgrade to the latest version of Apple iOS | Oct 8, 2014 | Jun 10, 2009 |
| Apple Safari | — | Upgrade to Apple Safari version 4.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Jun 10, 2009 |
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibsUpgrade kdelibs-apidocs | Dec 1, 2016 | Jun 10, 2009 |
| Oracle_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibsUpgrade kdelibs-devel | Oct 16, 2024 | Jun 10, 2009 |
| Suse | — | Upgrade kdelibs3-artsUpgrade kdelibs3-arts-64bitUpgrade kdelibs3-32bitUpgrade kdelibs3-default-styleUpgrade kdelibs3-docUpgrade kdelibs3-develUpgrade kdelibs3-arts-32bitUpgrade libwebkit-1_0-2-32bitUpgrade webkit-jscUpgrade libwebkit-1_0-2Upgrade kdelibs3-default-style-64bitUpgrade kdelibs3-default-style-32bitUpgrade libwebkit-develUpgrade kdelibs3-64bitUpgrade kdelibs3Upgrade libwebkit-lang | Feb 17, 2015 | Jun 10, 2009 |
| Ubuntu | — | Upgrade libwebkit-devUpgrade kdelibs4c2aUpgrade libwebkit-1.0-1-dbgUpgrade libqt4-webkitUpgrade kdelibs5Upgrade libwebkit-1.0-1 | Nov 8, 2024 | Jun 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub