CVE-2009-1701

Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod…

published June 10, 2009

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

⚠️ A crafty little bug lurks in WebKit that could let attackers play with code like a magician—disappearing a document body with a flick of their wand! Think of it like a restaurant where the head chef removes a key ingredient from the soup without telling anyone — suddenly, the whole dish can turn disastrous. In this case, attackers might exploit a missing check, leading to chaos in your web applications! This vulnerability could allow attackers to execute arbitrary code or cause an application crash, leading to denial of service. Users could experience unexpected crashes or worse, attackers could manipulate the application to run harmful commands at will. Absolutely devastating!

Put simply

Think of it like a restaurant where the head chef removes a key ingredient from the soup without telling anyone — suddenly, the whole dish can turn disastrous. In this case, attackers might exploit a missing check, leading to chaos in your web applications! This use-after-free vulnerability in WebKit allows remote attackers to destroy a document.body element with an unspecified XML container, leading to potential application crashes or arbitrary code execution.

What to do

This vulnerability could allow attackers to execute arbitrary code or cause an application crash, leading to denial of service. Users could experience unexpected crashes or worse, attackers could manipulate the application to run harmful commands at will. Absolutely devastating! To protect against this vulnerability, upgrade to Apple Safari 4.0 or later, and ensure that any older versions on devices are no longer in use. Regularly check for updates on your devices to maintain security! You've got this! Stay vigilant, follow those steps, and you’ll keep your applications safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07746 · 94.6th percentile
Published
2009-06-10T17:37Z
EPSS history
Timeline
  • 10 JUN 17:37Z
    Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod…
    cvelistv5