Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Webkit | — | Upgrade macOS to the latest version | Dec 16, 2011 | May 13, 2009 |
| Apple Safari | — | Upgrade to Apple Safari version 3.2.3Uninstall Apple Safari on Windows | Jan 5, 2012 | May 13, 2009 |
| Centos_linux | — | Upgrade kdegraphicsUpgrade kdegraphics-devel | Dec 1, 2016 | May 13, 2009 |
| Suse | — | Upgrade libqt4-sql-postgresql-32bitUpgrade libQtWebKit4Upgrade libQtWebKit-develUpgrade libqt4-develUpgrade libqt4-linguistUpgrade libqt4-qt3support-32bitUpgrade libqt4-x86Upgrade libQtWebKit4-x86Upgrade libqt4-sql-unixODBC-x86Upgrade libqt4-sql-mysql-x86Upgrade libqt4-sql-unixODBCUpgrade libqt4-sql-mysqlUpgrade libqt4-private-headers-develUpgrade libqt4-sqlUpgrade libQtWebKit4-32bitUpgrade libqt4-sql-x86Upgrade libqt4-sql-unixODBC-32bitUpgrade libqt4-devel-doc-dataUpgrade libqt4-qt3supportUpgrade libqt4-sql-32bitUpgrade libqt4Upgrade libqt4-x11-32bitUpgrade libqt4-sql-sqlite-x86Upgrade libqt4-devel-docUpgrade libqt4-sql-sqlite-32bitUpgrade libqt4-32bitUpgrade libqt4-sql-mysql-32bitUpgrade libqt4-x11-x86Upgrade libqt4-x11Upgrade libqt4-sql-postgresql-x86Upgrade libqt4-sql-postgresqlUpgrade libqt4-qt3support-x86Upgrade libqt4-sql-sqliteUpgrade qt4-x11-tools | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libwebkit-devUpgrade kdelibs4c2aUpgrade ksvgUpgrade libwebkit-1.0-1Upgrade libwebkit-1.0-1-dbgUpgrade libqt4-webkitUpgrade kdelibs5 | Nov 8, 2024 | May 13, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub