The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Upgrade to Apple Safari version 4.0Uninstall Apple Safari on Windows | Jan 5, 2012 | Jun 10, 2009 |
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibsUpgrade kdelibs-apidocs | Dec 1, 2016 | Jun 10, 2009 |
| Oracle_linux | — | Upgrade kdelibs-apidocsUpgrade kdelibs-develUpgrade kdelibs | Oct 16, 2024 | Jun 10, 2009 |
| Suse | — | Upgrade kdelibs3-arts-32bitUpgrade kdelibs3-32bitUpgrade kdelibs3-docUpgrade kdelibs3-default-styleUpgrade kdelibs3Upgrade libwebkit-develUpgrade kdelibs3-develUpgrade kdelibs3-default-style-32bitUpgrade kdelibs3-arts-64bitUpgrade libwebkit-langUpgrade kdelibs3-64bitUpgrade kdelibs3-artsUpgrade webkit-jscUpgrade kdelibs3-default-style-64bitUpgrade libwebkit-1_0-2-32bitUpgrade libwebkit-1_0-2 | Feb 17, 2015 | Jun 10, 2009 |
| Ubuntu | — | Upgrade libwebkit-1.0-1-dbgUpgrade libqt4-webkitUpgrade libwebkit-devUpgrade kdelibs4c2aUpgrade kdelibs5Upgrade libwebkit-1.0-1 | Nov 8, 2024 | Jun 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub