CVE-2009-0945

Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for…

published May 13, 2009

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

⚡ A negative index in the insertItemBefore method can open the door to memories you never wanted to recall! 📚 Think of this vulnerability like a restaurant where the waiter misreads your order and accidentally serves you last week's leftovers—yikes! In this case, the wrong index can lead the software to mishandle its data, creating chaos in memory. If exploited, attackers could execute arbitrary code, potentially gaining control of the affected system. This could mean unauthorized access to sensitive data or even complete system compromise, which is absolutely devastating!

Put simply

Think of this vulnerability like a restaurant where the waiter misreads your order and accidentally serves you last week's leftovers—yikes! In this case, the wrong index can lead the software to mishandle its data, creating chaos in memory. This issue arises from an array index error in the insertItemBefore method within the WebKit framework, impacting browsers like Safari and Chrome. When a document includes a negative index, it can trigger memory corruption, allowing for unexpected behavior or code execution.

What to do

If exploited, attackers could execute arbitrary code, potentially gaining control of the affected system. This could mean unauthorized access to sensitive data or even complete system compromise, which is absolutely devastating! Update to the latest versions of affected browsers: Safari (3.2.3 or later) and Chrome (1.0.154.65 or later). Regularly check for updates and patches for any other software that might rely on WebKit. 📅🛡️ You've got this! Stay vigilant and keep your browser updated to protect yourself. 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09322 · 95.4th percentile
Published
2009-05-13T17:00Z
EPSS history
Timeline
  • 13 MAY 17:00Z
    Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS for…
    cvelistv5