Vulnerability Description
Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | 10.4.11 |
| Apple | Mac Os X Server | 10.4.11 |
| Microsoft | Windows Vista | All versions |
| Microsoft | Windows Xp | All versions |
| Apple | Safari | <= 3.2.2 |
Related Weaknesses (CWE)
References
- http://code.google.com/p/chromium/issues/detail?id=9019
- http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html
- http://lists.apple.com/archives/security-announce/2009/May/msg00000.htmlPatchVendor Advisory
- http://lists.apple.com/archives/security-announce/2009/May/msg00001.htmlPatchVendor Advisory
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlPatchVendor Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://secunia.com/advisories/35056
- http://secunia.com/advisories/35074
- http://secunia.com/advisories/35095
- http://secunia.com/advisories/35576
- http://secunia.com/advisories/35805
- http://secunia.com/advisories/36062
- http://secunia.com/advisories/36461
- http://secunia.com/advisories/36790
FAQ
What is CVE-2009-0945?
CVE-2009-0945 is a vulnerability with a CVSS score of 9.3 (HIGH). Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chro...
How severe is CVE-2009-0945?
CVE-2009-0945 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-0945?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Mac Os X, Apple Mac Os X Server, Microsoft Windows Vista, Microsoft Windows Xp, Apple Safari.