The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document that triggers write access to an "offset of a NULL pointer."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 4.0 | Jan 5, 2012 | Jun 10, 2009 |
| Centos_linux | — | Upgrade kdelibs-develUpgrade kdelibs-apidocsUpgrade kdelibs | Dec 1, 2016 | Jun 10, 2009 |
| Oracle_linux | — | Upgrade kdelibsUpgrade kdelibs-develUpgrade kdelibs-apidocs | Oct 16, 2024 | Jun 10, 2009 |
| Suse | — | Upgrade kdelibs3-default-styleUpgrade kdelibs3-docUpgrade kdelibs3-default-style-32bitUpgrade kdelibs3Upgrade kdelibs3-develUpgrade kdelibs3-32bitUpgrade kdelibs3-arts-32bitUpgrade libwebkit-develUpgrade webkit-jscUpgrade kdelibs3-artsUpgrade kdelibs3-default-style-64bitUpgrade kdelibs3-64bitUpgrade libwebkit-langUpgrade libwebkit-1_0-2-32bitUpgrade kdelibs3-arts-64bitUpgrade libwebkit-1_0-2 | Feb 17, 2015 | Jun 10, 2009 |
| Ubuntu | — | Upgrade libwebkit-1.0-1-dbgUpgrade kdelibs4c2aUpgrade kdelibs5Upgrade libwebkit-devUpgrade libqt4-webkitUpgrade libwebkit-1.0-1 | Nov 8, 2024 | Jun 10, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub