CVE-2009-1698

NameCVE-2009-1698
DescriptionWebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-1867-1, DSA-1868-1, DSA-1950-1, DSA-1988-1
Debian Bugs534946, 534949

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
kde4libssourcelenny4:4.1.0-3+lenny1DSA-1868-1
kde4libssource(unstable)4:4.3.0-1medium
kdelibssourceetch4:3.5.5a.dfsg.1-8etch2DSA-1867-1
kdelibssourcelenny4:3.5.10.dfsg.1-0lenny2DSA-1867-1
kdelibssource(unstable)4:3.5.10.dfsg.1-2.1medium534949
qt4-x11sourceetch(not affected)
qt4-x11sourcelenny4.4.3-1+lenny1DSA-1988-1
qt4-x11source(unstable)4:4.5.2-1
webkitsourcelenny1.0.1-4+lenny2DSA-1950-1
webkitsource(unstable)1.1.5-1medium534946

Notes

http://trac.webkit.org/changeset/42081
[etch] - qt4-x11 <not-affected> (QTWebkit was introduced in 4.4)

Search for package or bug name: Reporting problems