PT-2009-4174 · Apple · Ios+2
Thierry Zoller
·
Published
2009-06-19
·
Updated
2025-04-23
·
CVE-2009-1692
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
WebKit versions before r41741
Apple iPhone OS versions 1.0 through 2.2.1
Apple iPhone OS for iPod touch versions 1.1 through 2.2.1
Safari (affected versions not specified)
Description:
The issue allows remote attackers to cause a denial of service, resulting in memory consumption or device reset, via a web page containing an HTMLSelectElement object with a large
length attribute. This is related to the length property of a Select object.Recommendations:
For WebKit versions before r41741, update to a version after r41741 to resolve the issue.
For Apple iPhone OS versions 1.0 through 2.2.1, update to a version after 2.2.1.
For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version after 2.2.1.
For Safari, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Safari
Webkit
Ios