CVE-2009-1692

Name	CVE-2009-1692
Description	WebKit before r41741, as used in Apple iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Safari, and other software, allows remote attackers to cause a denial of service (memory consumption or device reset) via a web page containing an HTMLSelectElement object with a large length attribute, related to the length property of a Select object.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)
References	DSA-1950-1
Debian Bugs	535793

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
kde4libs (PTS)	buster	4:4.14.38-3	vulnerable
qt4-x11 (PTS)	buster	4:4.8.7+dfsg-18+deb10u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
kde4libs	source	(unstable)	(unfixed)	unimportant
kdelibs	source	(unstable)	(unfixed)	unimportant
qt4-x11	source	(unstable)	4:4.6.2-4	unimportant
webkit	source	lenny	1.0.1-4+lenny2		DSA-1950-1
webkit	source	(unstable)	1.1.12-1	low		535793

Notes

QT4 might be fixed earlier, but only 4.6.2 was checked against
upstream (undisclosed) bug report is https://bugs.webkit.org/show_bug.cgi?id=23319
http://trac.webkit.org/changeset/41741