Bug 284116 (CVE-2009-1687)

Summary:	[TRACKER] WebKit GC ACE/DoS (CVE-2009-1687)
Product:	Gentoo Security	Reporter:	Alex Legler (RETIRED) <a3li>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	esigra
Priority:	High	Keywords:	Tracker
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1687
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	279187, 287494
Bug Blocks:

Description Alex Legler (RETIRED) archtester

2009-09-08 11:02:35 UTC

CVE-2009-1687 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1687):
  The JavaScript garbage collector in WebKit in Apple Safari before
  4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1
  through 2.2.1 does not properly handle allocation failures, which
  allows remote attackers to execute arbitrary code or cause a denial
  of service (memory corruption and application crash) via a crafted
  HTML document that triggers write access to an "offset of a NULL
  pointer."

Comment 1 Stefan Behte (RETIRED) gentoo-dev

2009-09-14 22:35:50 UTC

Patched here: https://bugs.gentoo.org/show_bug.cgi?id=279187

*** This bug has been marked as a duplicate of bug 279187 ***

Comment 2 Alex Legler (RETIRED) archtester

2009-09-14 22:39:57 UTC

kdelibs done doesn't mean other webkit implementations are fixed.

Comment 3 Tim Sammut (RETIRED) gentoo-dev

2011-01-05 06:06:31 UTC

Changing whiteboard to ?2 [glsa?] in order to catch this in a webkit-gtk GLSA.

Comment 4 Chris Reffett (RETIRED) gentoo-dev

2013-09-12 22:18:34 UTC

Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.