NetSight
IP …
critical9.3

CVE-2009-1698

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of…

Impact

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected products

VendorProductAffected versions
AppleSafari
through 3.2.2
Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3
AppleIphone Os
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1, 1.1.2
AppleIpod Touch
All versions

Weakness classification

CWE-94

References