mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
262 lines
9.6 KiB
JSON
262 lines
9.6 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2009-0945",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "USN-822-1",
|
|
"refsource": "UBUNTU",
|
|
"url": "http://www.ubuntu.com/usn/USN-822-1"
|
|
},
|
|
{
|
|
"name": "35805",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/35805"
|
|
},
|
|
{
|
|
"name": "http://support.apple.com/kb/HT3639",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.apple.com/kb/HT3639"
|
|
},
|
|
{
|
|
"name": "43068",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/43068"
|
|
},
|
|
{
|
|
"name": "FEDORA-2009-8039",
|
|
"refsource": "FEDORA",
|
|
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html"
|
|
},
|
|
{
|
|
"name": "ADV-2009-1621",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/1621"
|
|
},
|
|
{
|
|
"name": "http://support.apple.com/kb/HT3549",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.apple.com/kb/HT3549"
|
|
},
|
|
{
|
|
"name": "http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html"
|
|
},
|
|
{
|
|
"name": "ADV-2011-0212",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2011/0212"
|
|
},
|
|
{
|
|
"name": "1022207",
|
|
"refsource": "SECTRACK",
|
|
"url": "http://www.securitytracker.com/id?1022207"
|
|
},
|
|
{
|
|
"name": "20090519 ZDI-09-022: Apple Safari Malformed SVGList Parsing Code Execution Vulnerability",
|
|
"refsource": "BUGTRAQ",
|
|
"url": "http://www.securityfocus.com/archive/1/503594/100/0/threaded"
|
|
},
|
|
{
|
|
"name": "RHSA-2009:1130",
|
|
"refsource": "REDHAT",
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2009-1130.html"
|
|
},
|
|
{
|
|
"name": "ADV-2009-1298",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/1298"
|
|
},
|
|
{
|
|
"name": "35576",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/35576"
|
|
},
|
|
{
|
|
"name": "35074",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/35074"
|
|
},
|
|
{
|
|
"name": "37746",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/37746"
|
|
},
|
|
{
|
|
"name": "36790",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/36790"
|
|
},
|
|
{
|
|
"name": "APPLE-SA-2009-06-17-1",
|
|
"refsource": "APPLE",
|
|
"url": "http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html"
|
|
},
|
|
{
|
|
"name": "APPLE-SA-2009-05-12",
|
|
"refsource": "APPLE",
|
|
"url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
|
|
},
|
|
{
|
|
"name": "35056",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/35056"
|
|
},
|
|
{
|
|
"name": "http://www.zerodayinitiative.com/advisories/ZDI-09-022",
|
|
"refsource": "MISC",
|
|
"url": "http://www.zerodayinitiative.com/advisories/ZDI-09-022"
|
|
},
|
|
{
|
|
"name": "34924",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/34924"
|
|
},
|
|
{
|
|
"name": "36461",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/36461"
|
|
},
|
|
{
|
|
"name": "safari-webkit-svglist-bo(50477)",
|
|
"refsource": "XF",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50477"
|
|
},
|
|
{
|
|
"name": "APPLE-SA-2009-05-12",
|
|
"refsource": "APPLE",
|
|
"url": "http://lists.apple.com/archives/security-announce/2009/May/msg00000.html"
|
|
},
|
|
{
|
|
"name": "USN-823-1",
|
|
"refsource": "UBUNTU",
|
|
"url": "https://usn.ubuntu.com/823-1/"
|
|
},
|
|
{
|
|
"name": "DSA-1950",
|
|
"refsource": "DEBIAN",
|
|
"url": "http://www.debian.org/security/2009/dsa-1950"
|
|
},
|
|
{
|
|
"name": "SUSE-SR:2011:002",
|
|
"refsource": "SUSE",
|
|
"url": "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html"
|
|
},
|
|
{
|
|
"name": "36062",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/36062"
|
|
},
|
|
{
|
|
"name": "USN-857-1",
|
|
"refsource": "UBUNTU",
|
|
"url": "http://www.ubuntu.com/usn/USN-857-1"
|
|
},
|
|
{
|
|
"name": "APPLE-SA-2009-05-12",
|
|
"refsource": "APPLE",
|
|
"url": "http://lists.apple.com/archives/security-announce/2009/May/msg00001.html"
|
|
},
|
|
{
|
|
"name": "TA09-133A",
|
|
"refsource": "CERT",
|
|
"url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
|
|
},
|
|
{
|
|
"name": "oval:org.mitre.oval:def:11584",
|
|
"refsource": "OVAL",
|
|
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11584"
|
|
},
|
|
{
|
|
"name": "ADV-2009-1297",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/1297"
|
|
},
|
|
{
|
|
"name": "35095",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/35095"
|
|
},
|
|
{
|
|
"name": "FEDORA-2009-8049",
|
|
"refsource": "FEDORA",
|
|
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html"
|
|
},
|
|
{
|
|
"name": "http://support.apple.com/kb/HT3550",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.apple.com/kb/HT3550"
|
|
},
|
|
{
|
|
"name": "FEDORA-2009-6166",
|
|
"refsource": "FEDORA",
|
|
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html"
|
|
},
|
|
{
|
|
"name": "USN-836-1",
|
|
"refsource": "UBUNTU",
|
|
"url": "http://www.ubuntu.com/usn/USN-836-1"
|
|
},
|
|
{
|
|
"name": "ADV-2009-1321",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/1321"
|
|
},
|
|
{
|
|
"name": "http://code.google.com/p/chromium/issues/detail?id=9019",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://code.google.com/p/chromium/issues/detail?id=9019"
|
|
}
|
|
]
|
|
}
|
|
} |