Name | CVE-2009-3272 |
Description | Stack consumption vulnerability in WebKit.dll in WebKit in Apple Safari 3.2.3, and possibly other versions before 4.1.2, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls eval on a long string composed of A/ sequences. |
Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
The information below is based on the following data on fixed versions.
Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
---|---|---|---|---|---|---|
kde4libs | source | (unstable) | (unfixed) | unimportant | ||
kdelibs | source | (unstable) | (unfixed) | unimportant | ||
qt4-x11 | source | etch | (not affected) | |||
qt4-x11 | source | (unstable) | (unfixed) | unimportant |
[etch] - qt4-x11 <not-affected> (webkit support introduced in version 4.4)
browser crashers are not considered security-relevant