Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 284146 (CVE-2009-1711)

Summary: [TRACKER] WebKit Attr DOM object NULL-ptr deref ACE/DoS (CVE-2009-1711)
Product: Gentoo Security Reporter: Alex Legler (RETIRED) <a3li>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Severity: normal Keywords: Tracker
Priority: High    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B2 [ebuild]
Package list:
Runtime testing required: ---

Description Alex Legler (RETIRED) archtester gentoo-dev Security 2009-09-08 11:04:54 UTC
CVE-2009-1711 (
  WebKit in Apple Safari before 4.0 does not properly initialize
  memory for Attr DOM objects, which allows remote attackers to
  execute arbitrary code or cause a denial of service (application
  crash) via a crafted HTML document.
Comment 1 Chris Reffett (RETIRED) gentoo-dev Security 2013-09-12 22:09:44 UTC
Presumably all affected versions are gone from tree. Closing as discussed with keytoaster.