Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Dec 16, 2011 | May 13, 2009 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 3.2.3 | Jan 5, 2012 | May 13, 2009 |
| Centos_linux | — | Upgrade kdegraphics-develUpgrade kdegraphics | Dec 1, 2016 | May 13, 2009 |
| Suse | — | Upgrade dbus-1-qt-develUpgrade kdegraphics3-faxUpgrade qt-x11-32bitUpgrade libqt4-develUpgrade qt-qt3supportUpgrade qt-sql-64bitUpgrade kdegraphics3-imagingUpgrade qt-x11-x86Upgrade dbus-1-qt-32bitUpgrade qt-qt3support-64bitUpgrade kdegraphics3Upgrade kdegraphics3-pdfUpgrade kdegraphics3-extraUpgrade qt-sqlUpgrade libqt4-qt3support-32bitUpgrade libqt4-sqlUpgrade kdegraphics3-scanUpgrade libwebkit-1_0-2Upgrade dbus-1-qtUpgrade dbus-1-qt-x86Upgrade qt-devel-docUpgrade qt-x86Upgrade webkit-jscUpgrade qt-sql-x86Upgrade qt-32bitUpgrade qt-64bitUpgrade kdegraphics3-3DUpgrade libqt4-32bitUpgrade qt-devel-64bitUpgrade libqt4-sql-sqliteUpgrade kdegraphics3-postscriptUpgrade libqt4-64bitUpgrade kdegraphics3-texUpgrade qt-sql-32bitUpgrade libqt4-sql-64bitUpgrade dbus-1-qt-64bitUpgrade libwebkit-1_0-2-32bitUpgrade libqt4-x11-64bitUpgrade libqt4-x11-32bitUpgrade qt-qt3support-32bitUpgrade kdegraphics3-develUpgrade qt-qt3support-x86Upgrade kdegraphics3-kameraUpgrade libqt4-qt3support-64bitUpgrade qt-x11-64bitUpgrade libwebkit-langUpgrade libqt4-sql-32bitUpgrade libqt4-qt3supportUpgrade libwebkit-develUpgrade libqt4Upgrade qt-x11Upgrade libqt4-x11 | Feb 17, 2015 | May 13, 2009 |
| Ubuntu | — | Upgrade libwebkit-devUpgrade libwebkit-1.0-1-dbgUpgrade ksvgUpgrade kdelibs4c2aUpgrade libqt4-webkitUpgrade kdelibs5Upgrade libwebkit-1.0-1 | Nov 8, 2024 | May 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub