NetSight
IP …
critical9.3

CVE-2009-1725

WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWe…

Impact

WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms; KHTML in kdelibs in KDE; QtWebKit (aka Qt toolkit); and possibly other products do not properly handle numeric character references, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.

Affected products

VendorProductAffected versions
AppleSafari
through 4.0.1
Versions 2.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3
AppleIphone Os
through 3.0.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1
AppleIpod Touch
All versions

Weakness classification

CWE-189

References