Bug 284108 (CVE-2009-0945)

Summary:	[TRACKER] WebKit insertItemBefore() ACE (CVE-2009-0945)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	Keywords:	Tracker
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0945
Whiteboard:	B2 [ebuild]
Package list:		Runtime testing required:	---
Bug Depends on:	279559
Bug Blocks:

Description Alex Legler (RETIRED) archtester

2009-09-08 11:01:53 UTC

CVE-2009-0945 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-0945):
  Array index error in the insertItemBefore method in WebKit, as used
  in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0
  through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google
  Chrome Stable before 1.0.154.65, and possibly other products allows
  remote attackers to execute arbitrary code via a document with a
  SVGPathList data structure containing a negative index in the (1)
  SVGTransformList, (2) SVGStringList, (3) SVGNumberList, (4)
  SVGPathSegList, (5) SVGPointList, or (6) SVGLengthList SVGList
  object, which triggers memory corruption.

Comment 1 Chris Reffett (RETIRED) gentoo-dev

2013-09-12 22:10:43 UTC

Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.