Vulnerability Details CVE-2009-1709
Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.081
EPSS Ranking 91.7%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2009-1709
-
cpe:2.3:a:apple:safari:0.8
-
cpe:2.3:a:apple:safari:0.9
-
cpe:2.3:a:apple:safari:1.0
-
cpe:2.3:a:apple:safari:1.0.3
-
cpe:2.3:a:apple:safari:1.0b1
-
cpe:2.3:a:apple:safari:1.1
-
cpe:2.3:a:apple:safari:1.2
-
cpe:2.3:a:apple:safari:1.3
-
cpe:2.3:a:apple:safari:1.3.1
-
cpe:2.3:a:apple:safari:1.3.2
-
cpe:2.3:a:apple:safari:2.0
-
cpe:2.3:a:apple:safari:2.0.2
-
cpe:2.3:a:apple:safari:2.0.4
-
cpe:2.3:a:apple:safari:3.0
-
cpe:2.3:a:apple:safari:3.0.0
-
cpe:2.3:a:apple:safari:3.0.0b
-
cpe:2.3:a:apple:safari:3.0.1
-
cpe:2.3:a:apple:safari:3.0.1b
-
cpe:2.3:a:apple:safari:3.0.2
-
cpe:2.3:a:apple:safari:3.0.2b
-
cpe:2.3:a:apple:safari:3.0.3
-
cpe:2.3:a:apple:safari:3.0.3b
-
cpe:2.3:a:apple:safari:3.0.4
-
cpe:2.3:a:apple:safari:3.0.4b
-
cpe:2.3:a:apple:safari:3.1
-
cpe:2.3:a:apple:safari:3.1.0
-
cpe:2.3:a:apple:safari:3.1.0b
-
cpe:2.3:a:apple:safari:3.1.1
-
cpe:2.3:a:apple:safari:3.1.1b
-
cpe:2.3:a:apple:safari:3.1.2
-
cpe:2.3:a:apple:safari:3.1.2b
-
cpe:2.3:a:apple:safari:3.2
-
cpe:2.3:a:apple:safari:3.2.0b
-
cpe:2.3:a:apple:safari:3.2.1
-
cpe:2.3:a:apple:safari:3.2.1b
-
cpe:2.3:a:apple:safari:3.2.2
-
cpe:2.3:a:apple:safari:3.2.2b
-
cpe:2.3:a:apple:safari:3.2.3