Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Dec 16, 2011 | May 13, 2009 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 3.2.3 | Jan 5, 2012 | May 13, 2009 |
| Centos_linux | — | Upgrade kdegraphics-develUpgrade kdegraphics | Dec 1, 2016 | May 13, 2009 |
| Suse | — | Upgrade libqt4-sql-mysqlUpgrade libqt4-sqlUpgrade libQtWebKit4-x86Upgrade libqt4-sql-x86Upgrade libqt4-sql-mysql-x86Upgrade libqt4-sql-postgresql-32bitUpgrade libQtWebKit4Upgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-x86Upgrade libqt4-sql-unixODBC-x86Upgrade libQtWebKit-develUpgrade libqt4-develUpgrade libqt4-private-headers-develUpgrade libqt4-sql-unixODBCUpgrade libqt4-qt3support-32bitUpgrade libqt4-linguistUpgrade libQtWebKit4-32bitUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-x11-32bitUpgrade libqt4Upgrade libqt4-qt3supportUpgrade libqt4-sql-32bitUpgrade libqt4-32bitUpgrade libqt4-x11-x86Upgrade qt4-x11-toolsUpgrade libqt4-x11Upgrade libqt4-sql-postgresql-x86Upgrade libqt4-qt3support-x86Upgrade libqt4-devel-docUpgrade libqt4-sql-sqlite-x86Upgrade libqt4-sql-sqliteUpgrade libqt4-sql-postgresqlUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-devel-doc-data | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade ksvgUpgrade kdelibs4c2aUpgrade kdelibs5Upgrade libwebkit-1.0-1Upgrade libwebkit-1.0-1-dbgUpgrade libqt4-webkitUpgrade libwebkit-dev | Nov 8, 2024 | May 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub