Bug 279559 (CVE-2009-094)

Summary:

<=kde-base/ksvg-3.5.10 Array indexing vulnerability (CVE-2009-0945)

Product:

Gentoo Security

Reporter:

Robert Förster <Dessa>

Component:

Vulnerabilities

Assignee:

Gentoo Security <security>

Status:

RESOLVED OBSOLETE

Severity:

normal

Priority:

High

Version:

unspecified

Hardware:

All

OS:

Linux

Whiteboard:

B2 [ebuild]

Package list:

Runtime testing required:

---

Bug Depends on:

Bug Blocks:

284108

Attachments:

Description	Flags
patch from upstream svn	none

Description Robert Förster 2009-07-29 08:03:48 UTC

CVE-2009-0945 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0945):
  Array index error in the insertItemBefore method in WebKit, as used in Apple
  Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2.2.1, iPhone OS
  for iPod touch 1.1 through 2.2.1, Google Chrome Stable before 1.0.154.65, and
  possibly other products allows remote attackers to execute arbitrary code via a
  document with a SVGPathList data structure containing a negative index in the
  (1) SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4) SVGPathSegList,
  (5) SVGPointList, or (6) SVGLengthList SVGList object, which triggers memory
  corruption.

Comment 1 Robert Förster 2009-07-29 08:08:03 UTC

Created attachment 199515 [details, diff]
patch from upstream svn

due to my (rather unintended) merge of two CVEs in bug 274566, kdelibs-4* is not affected anymore

Comment 2 Tomáš Chvátal (RETIRED) gentoo-dev

2009-11-23 00:41:33 UTC

Guys there is no ksvg anymore, Your call what to do with the report.

Comment 3 Chris Reffett (RETIRED) gentoo-dev

2013-09-03 12:29:52 UTC

KDE 3.5 long gone.