Bug 284114 (CVE-2009-1686)

Summary:	[TRACKER] WebKit JavaScript "const" ACE/DoS (CVE-2009-1686)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	Keywords:	Tracker
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1686
Whiteboard:	B2 [ebuild]
Package list:		Runtime testing required:	---

Description Alex Legler (RETIRED) archtester

2009-09-08 11:02:27 UTC

CVE-2009-1686 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1686):
  WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and
  iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle
  constant (aka const) declarations in a type-conversion operation
  during JavaScript exception handling, which allows remote attackers
  to execute arbitrary code or cause a denial of service (memory
  corruption and application crash) via a crafted HTML document.

Comment 1 Chris Reffett (RETIRED) gentoo-dev

2013-09-12 22:11:07 UTC

Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.