National Cyber-Alert System

Vulnerability Summary for CVE-2009-0945

Overview

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and possibly other products allows remote attackers to execute arbitrary code via a document with a SVGPathList data structure containing a negative index in the (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory corruption.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA09-133A

Name: TA09-133A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA09-133A.html

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3549

Type: Advisory; Patch Information

Hyperlink:http://support.apple.com/kb/HT3549

External Source: APPLE

Name: APPLE-SA-2009-05-12

Type: Advisory; Patch Information

Hyperlink:http://lists.apple.com/archives/security-announce/2009/May/msg00002.html

External Source: APPLE

Name: APPLE-SA-2009-05-12

Type: Advisory; Patch Information

Hyperlink:http://lists.apple.com/archives/security-announce/2009/May/msg00001.html

External Source: APPLE

Name: APPLE-SA-2009-05-12

Type: Advisory; Patch Information

Hyperlink:http://lists.apple.com/archives/security-announce/2009/May/msg00000.html

External Source: FEDORA

Name: FEDORA-2009-8049

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01196.html

External Source: FEDORA

Name: FEDORA-2009-8039

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01177.html

External Source: FEDORA

Name: FEDORA-2009-6166

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00303.html

External Source: XF

Name: safari-webkit-svglist-bo(50477)

Hyperlink:http://xforce.iss.net/xforce/xfdb/50477

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-09-022

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-09-022

External Source: VUPEN

Name: ADV-2009-1621

Hyperlink:http://www.vupen.com/english/advisories/2009/1621

External Source: VUPEN

Name: ADV-2009-1321

Hyperlink:http://www.vupen.com/english/advisories/2009/1321

External Source: VUPEN

Name: ADV-2009-1298

Hyperlink:http://www.vupen.com/english/advisories/2009/1298

External Source: VUPEN

Name: ADV-2009-1297

Hyperlink:http://www.vupen.com/english/advisories/2009/1297

External Source: SECTRACK

Name: 1022207

Hyperlink:http://www.securitytracker.com/id?1022207

External Source: BID

Name: 34924

Hyperlink:http://www.securityfocus.com/bid/34924

External Source: BUGTRAQ

Name: 20090519 ZDI-09-022: Apple Safari Malformed SVGList Parsing Code Execution Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/503594/100/0/threaded

External Source: REDHAT

Name: RHSA-2009:1130

Hyperlink:http://www.redhat.com/support/errata/RHSA-2009-1130.html

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3639

Hyperlink:http://support.apple.com/kb/HT3639

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3550

Hyperlink:http://support.apple.com/kb/HT3550

External Source: SECUNIA

Name: 36062

Hyperlink:http://secunia.com/advisories/36062

External Source: SECUNIA

Name: 35805

Hyperlink:http://secunia.com/advisories/35805

External Source: SECUNIA

Name: 35576

Hyperlink:http://secunia.com/advisories/35576

External Source: SECUNIA

Name: 35095

Hyperlink:http://secunia.com/advisories/35095

External Source: SECUNIA

Name: 35074

Hyperlink:http://secunia.com/advisories/35074

External Source: SECUNIA

Name: 35056

Hyperlink:http://secunia.com/advisories/35056

External Source: APPLE

Name: APPLE-SA-2009-06-17-1

Hyperlink:http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html

External Source: CONFIRM

Name: http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html

Hyperlink:http://googlechromereleases.blogspot.com/2009/05/stable-update-bug-fix.html

External Source: CONFIRM

Name: http://code.google.com/p/chromium/issues/detail?id=9019

Hyperlink:http://code.google.com/p/chromium/issues/detail?id=9019